PT-2025-45368 · Advantech · Advantech Iview

Exodus Intelligence · Published 2022-01-13 · Updated 2025-11-06 · CVE-2022-50593

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.04 build 6425

Description The SNMP management tool in Advantech iView has a flaw related to insufficient protection of the SQL query structure when processing the search term parameter. Exploitation allows a remote attacker to execute arbitrary code. The vulnerability is present in the ‘NetworkServlet’ API endpoint. Successful exploitation allows for remote code execution with administrator privileges.

Recommendations Update to version v5.7.04 build 6425 or later.

Fix

Missing Authentication

SQL injection

Weakness Enumeration

CWE-306

CWE-89

Related Identifiers

BDU:2025-14783

CVE-2022-50593

Affected Products

Advantech Iview

References · 7

• https://advantech.tw/support/details/firmware?id=1-HIPU-183 · Patch
• https://bdu.fstec.ru/vul/2025-14783 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50593 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50593 · Vendor Advisory
• https://blog.exodusintel.com/2022/03/01/advantech-iview-search_term-parameter-sql-injection-remote-code-execution-vulnerability · Note
• https://tenable.com/cve/CVE-2022-50593 · Note
• https://vulncheck.com/advisories/advantech-iview-searchterm-parameter-sqli-rce · Note