CVE-2020-14497

Published Jul 15, 2020 CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Description
Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-6633 Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.
References
Link Providers
https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-827/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-828/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-830/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-832/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-833/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-835/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-836/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-837/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-838/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-839/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-842/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-843/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-844/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-845/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-846/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-847/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-848/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-849/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-850/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-851/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-852/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-853/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-854/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-855/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-856/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-857/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-858/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-860/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-861/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-862/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-863/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-864/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-865/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-866/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-868/ cve-icon cve-icon
https://www.zerodayinitiative.com/advisories/ZDI-20-869/ cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
icscert
Published
Updated
Aug 4, 2024, 12:46 PM
Reserved
Jun 19, 2020, 12:00 AM
Status
Modified
Published
Jul 15, 2020, 2:15 AM
Modified
Jun 17, 2026, 2:54 AM