CVE-2022-2139mediumCWE-23

CVE-2022-2139: medium-severity vulnerability in Advantech iView iView

Advantech iView

Published · Updated

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 16%
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Advantech iView · iView
Related CVEs — Advantech iView iView

In the same product, most dangerous first.

CVE-2022-2143CRITICALAdvantech iViewEPSS 59.4%CVE-2022-2138HIGHAdvantech iViewEPSS 11.3%CVE-2022-2135HIGHAdvantech iViewEPSS 10.2%CVE-2022-2136HIGHAdvantech iViewEPSS 9.1%CVE-2022-2137MEDIUMAdvantech iViewEPSS 0.9%CVE-2022-2142HIGHAdvantech iViewEPSS 0.9%
References
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03