PT-2022-6282 · Advantech · Advantech Iview

Rgod · Published 2022-06-30 · Updated 2022-07-28 · CVE-2022-2142

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech iView (affected versions not specified)

Description The issue is related to a SQL injection vulnerability with high attack complexity. This vulnerability may allow an unauthorized attacker to disclose protected information. The vulnerability is associated with the lack of protection of the SQL query structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2023-00735

CVE-2022-2142

ZDI-22-934

Affected Products

Advantech Iview

References · 10

• https://zerodayinitiative.com/advisories/ZDI-22-934 · Security Note
• https://bdu.fstec.ru/vul/2023-00735 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2142 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2142 · Vendor Advisory
• https://vuldb.com/ru/?id.204925 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-179-03 · Note
• https://zerodayinitiative.com/advisories/ZDI-CAN-16607 · Note
• https://t.me/cibsecurity/46802 · Telegram Post
• https://t.me/cvenotify/33953 · Telegram Post
• https://t.me/cvenotify/33624 · Telegram Post