CVE-2022-2135 HIGH

CVE-2022-2135: Advantech iView

Vendor Advantech Iview
Product iView
Weakness CWE-89 · SQLi
Published July 22, 2022
Last update April 16, 2025

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

Key dates

02Disclosure timeline

July 22, 2022 CVE published
April 16, 2025 Record updated