CVE-2025-13373 HIGH

CVE-2025-13373: Advantech iView SQL Injection

Vendor Advantech

Product iView

Weakness CWE-89 · SQLi

Published December 4, 2025

Last update December 5, 2025

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.

Key dates

02Disclosure timeline

December 4, 2025 CVE published

December 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-13373

Related vulnerabilities

04Related CVE

CVE-2026-33324 SQLBot prompt injection allows arbitrary SQL execution and remote code execution CVE-2020-12507 s::can moni::tools autheticated SQL injection CVE-2019-25212 video carousel slider with lightbox <= 1.0.6 - Authenticated (Admin+) SQL Injection CVE-2023-6305 SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection CVE-2023-3673 SQL Injection in pimcore/pimcore