| |
Vulnerability CVE-2022-3323
Published: 2022-09-27 Modified: 2022-09-28
| Description: |
An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password. |
References: |
https://www.tenable.com/security/research/tra-2022-32
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
