Lucene search
HistoryJul 22, 2022 - 3:15 p.m.
CVE-2022-2143
cve-2022-2143
vulnerability
command injection
remote code execution
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.204 Low
EPSS
Percentile
96.4%
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
Affected configurations
Node
advantechiviewRange<5.7.04.6469
| CPE | Name | Operator | Version |
|---|---|---|---|
| advantech:iview | advantech iview | lt | 5.7.04.6469 |
CNA Affected
[
{
"product": "iView",
"vendor": "Advantech iView",
"versions": [
{
"lessThan": "5_7_04_6469",
"status": "affected",
"version": "All",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
zdt
zdt
Advantech iView NetworkServlet Command Injection Exploit
2022-08-19 00:00:00
prion
prion
Command injection
2022-07-22 15:15:00
cvelist
cvelist
CVE-2022-2143 Advantech iView
2022-06-28 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2022-08-19 20:28:14
nvd
nvd
CVE-2022-2143
2022-07-22 15:15:08
checkpoint_advisories
checkpoint_advisories
Advantech iView Command Injection (CVE-2022-2143)
2022-10-31 00:00:00
zdi
zdi
metasploit
metasploit
Advantech iView NetworkServlet Command Injection
2022-07-19 22:25:57
nessus
nessus
cnvd
cnvd
Advantech iView Command Injection Vulnerability (CNVD-2023-16477)
2022-06-30 00:00:00
packetstorm
packetstorm
Advantech iView NetworkServlet Command Injection
2022-08-18 00:00:00
ics
ics
Advantech iView
2022-06-28 12:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.204 Low
EPSS
Percentile
96.4%
Related for CVE-2022-2143