CVE-2022-2138

The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*

History

28 Jul 2022, 20:12

Type Values Removed Values Added
References (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03 - (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03 - Third Party Advisory, US Government Resource
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CPE cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*
First Time Advantech
Advantech iview

22 Jul 2022, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-07-22 15:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-2138

Mitre link : CVE-2022-2138

CVE.ORG link : CVE-2022-2138


JSON object : View

Products Affected

advantech

  • iview
CWE
CWE-306

Missing Authentication for Critical Function