CVE-2020-16245
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.7%
exploitation probability
7.7%top 6% of all CVEs
observed exploitation
nono source reports it
Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code.
Affected products
n/a · Advantech iViewReferences
https://us-cert.cisa.gov/ics/advisories/icsa-20-238-01https://www.zerodayinitiative.com/advisories/ZDI-20-1084/https://www.zerodayinitiative.com/advisories/ZDI-20-1085/https://www.zerodayinitiative.com/advisories/ZDI-20-1086/https://www.zerodayinitiative.com/advisories/ZDI-20-1087/https://www.zerodayinitiative.com/advisories/ZDI-20-1088/https://www.zerodayinitiative.com/advisories/ZDI-20-1089/https://www.zerodayinitiative.com/advisories/ZDI-20-1090/https://www.zerodayinitiative.com/advisories/ZDI-20-1091/https://www.zerodayinitiative.com/advisories/ZDI-20-1092/