CVE-2022-2138 HIGH

CVE-2022-2138: Advantech iView

Vendor Advantech Iview

Product iView

Weakness CWE-306 · Missing auth

Published July 22, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

8.2/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

What the vulnerability does

01Description

The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.

Key dates

02Disclosure timeline

July 22, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2138 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

CVE-2022-2138: Advantech iView

01Description

02Disclosure timeline

03References

04Related CVE