CNNVD-202507-1544 Information
CNNVD ID
CNNVD-202507-1544
Related CVE
- CNNVD Published: 2025-07-10
Description (Chinese)
Advantech iView是中国研华（Advantech）公司的一个基于简单网络协议（SNMP）来对 B + B SmartWorx 设备进行管理的软件。 Advantech iView存在SQL注入漏洞，该漏洞源于NetworkServlet.archiveTrap函数中参数清理不当，可能导致SQL注入和远程代码执行。
Description (English)
Advantech iView is a software based on a simple network protocol (SNMP) for managing B+ B SmartWorks equipment. Advantech iView has an SQL injection loophole, which stems from the inappropriate clean-up of parameters in the NetworkServlet.archiveTrap function, which may lead to SQL injection and remote code execution.
Hazard Level
Medium
Vulnerability Type
SQL注入
Affected Vendor
研华
Published
2025-07-10
Last Modified
2026-02-24
References
https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183 https://nvd.nist.gov/vuln/detail/CVE-2025-53515 https://access.redhat.com/security/cve/cve-2025-53515
Patch
https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
Share on: