CVE-2020-16245: fallo en Advantech iView
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 7.7%
Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code.
Productos afectados
n/a · Advantech iViewReferencias
https://us-cert.cisa.gov/ics/advisories/icsa-20-238-01https://www.zerodayinitiative.com/advisories/ZDI-20-1084/https://www.zerodayinitiative.com/advisories/ZDI-20-1085/https://www.zerodayinitiative.com/advisories/ZDI-20-1086/https://www.zerodayinitiative.com/advisories/ZDI-20-1087/https://www.zerodayinitiative.com/advisories/ZDI-20-1088/https://www.zerodayinitiative.com/advisories/ZDI-20-1089/https://www.zerodayinitiative.com/advisories/ZDI-20-1090/https://www.zerodayinitiative.com/advisories/ZDI-20-1091/https://www.zerodayinitiative.com/advisories/ZDI-20-1092/