← Database

CVE-2022-50592

HIGH CVSS: 7.2 Published: 2025-11-06 Modified: 2026-06-17

Description

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘getInventoryReportData’ parameter to the ‘NetworkServlet’ endpoint. Successful exploitation allows for remote code execution with administrator privileges.

Affected Platforms

Advantech Iview

Weakness Type

CWE-89, CWE-306, CWE-89

References