Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2020-14497

UNKNOWN
Published 2020-07-15T01:50:54
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2020-14497. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-97xf-5qr7-4cw3

Advisory Details

Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.

CVSS Scoring

CVSS Score

7.5

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-14497
WEB https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-827
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-828
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-830
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-832
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-833
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-835
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-836
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-837
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-838
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-839
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-842
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-843
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-844
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-845
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-846
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-847
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-848
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-849
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-850
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-851
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-852
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-853
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-854
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-855
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-856
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-857
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-858
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-860
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-861
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-862
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-863
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-864
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-865
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-866
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-868
WEB https://www.zerodayinitiative.com/advisories/ZDI-20-869

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
https://www.zerodayinitiative.com/advisories/ZDI-20-847/
https://www.zerodayinitiative.com/advisories/ZDI-20-827/
https://www.zerodayinitiative.com/advisories/ZDI-20-868/
https://www.zerodayinitiative.com/advisories/ZDI-20-852/
https://www.zerodayinitiative.com/advisories/ZDI-20-862/
https://www.zerodayinitiative.com/advisories/ZDI-20-860/
https://www.zerodayinitiative.com/advisories/ZDI-20-846/
https://www.zerodayinitiative.com/advisories/ZDI-20-844/
https://www.zerodayinitiative.com/advisories/ZDI-20-845/
https://www.zerodayinitiative.com/advisories/ZDI-20-855/
https://www.zerodayinitiative.com/advisories/ZDI-20-857/
https://www.zerodayinitiative.com/advisories/ZDI-20-854/
https://www.zerodayinitiative.com/advisories/ZDI-20-864/
https://www.zerodayinitiative.com/advisories/ZDI-20-849/
https://www.zerodayinitiative.com/advisories/ZDI-20-832/
https://www.zerodayinitiative.com/advisories/ZDI-20-835/
https://www.zerodayinitiative.com/advisories/ZDI-20-848/
https://www.zerodayinitiative.com/advisories/ZDI-20-838/
https://www.zerodayinitiative.com/advisories/ZDI-20-850/
https://www.zerodayinitiative.com/advisories/ZDI-20-856/
https://www.zerodayinitiative.com/advisories/ZDI-20-866/
https://www.zerodayinitiative.com/advisories/ZDI-20-842/
https://www.zerodayinitiative.com/advisories/ZDI-20-837/
https://www.zerodayinitiative.com/advisories/ZDI-20-865/
https://www.zerodayinitiative.com/advisories/ZDI-20-851/
https://www.zerodayinitiative.com/advisories/ZDI-20-828/
https://www.zerodayinitiative.com/advisories/ZDI-20-853/
https://www.zerodayinitiative.com/advisories/ZDI-20-843/
https://www.zerodayinitiative.com/advisories/ZDI-20-839/
https://www.zerodayinitiative.com/advisories/ZDI-20-858/
https://www.zerodayinitiative.com/advisories/ZDI-20-830/
https://www.zerodayinitiative.com/advisories/ZDI-20-861/
https://www.zerodayinitiative.com/advisories/ZDI-20-863/
https://www.zerodayinitiative.com/advisories/ZDI-20-869/
https://www.zerodayinitiative.com/advisories/ZDI-20-833/
https://www.zerodayinitiative.com/advisories/ZDI-20-836/
Published: 2020-07-15T01:50:54
Last Modified: 2024-08-04T12:46:34.614Z
Copied to clipboard!