CNNVD-202507-1597 Information
CNNVD ID
CNNVD-202507-1597
Related CVE
- CNNVD Published: 2025-07-11
Description (Chinese)
Advantech iView是中国研华（Advantech）公司的一个基于简单网络协议（SNMP）来对 B + B SmartWorx 设备进行管理的软件。 Advantech iView存在路径遍历漏洞，该漏洞源于NetworkServlet.processImportRequest中对参数清理不当，可能导致目录遍历攻击。
Description (English)
Advantech iView is a software based on a simple network protocol (SNMP) for managing B+ B SmartWorks equipment. Advantech iView has a loophole in its path, which stems from the inappropriate clean-up of parameters in NetworkServlet.processImportRequest, which could lead to a catalogue attack.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
研华
Published
2025-07-11
Last Modified
2026-02-24
References
https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183 https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 https://access.redhat.com/security/cve/cve-2025-46704
Patch
https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
Share on: