CVE-2020-14501 - Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue

Back Back to CVE browser

CRITICAL

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue

Published Jul 15, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.70%

Description

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulnerability may allow an attacker to obtain the information of the user table, including the administrator credentials in plain text. An attacker may also delete the administrator account.

Affected products

Vendor n/a Product Advantech iView Default
n/a
- Version
  Versions 5.6 and prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Advantech iView

n/a

Version	Status	Constraints
Versions 5.6 and prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6637
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-859/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6637		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-20-859/		x_refsource_MISCThird Party Advisory