CVE-2022-50594

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘data’ parameter to the ‘NetworkServlet’ endpoint. Successful exploitation allows for the exfiltration of user data, included clear text passwords.

The following products are affected by CVE-2022-50594 vulnerability.

No data.

Here, you will find a curated list of external links that provide in-depth information to CVE-2022-50594.

URL	Resource
https://blog.exodusintel.com/2022/03/01/advantech-iview-page_action_service-parameter-sql-injection-remote-code-execution-vulnerability/
https://www.advantech.tw/support/details/firmware?id=1-HIPU-183
https://www.vulncheck.com/advisories/advantech-iview-data-parameter-sqli-information-disclosure