CNNVD-202507-1599 Information

CNNVD ID

CNNVD-202507-1599

CVE-2025-41442

  • CNNVD Published: 2025-07-11

Description (Chinese)

Advantech iView是中国研华(Advantech)公司的一个基于简单网络协议(SNMP)来对 B + B SmartWorx 设备进行管理的软件。 Advantech iView 5.7.05 build 7057之前版本存在跨站脚本漏洞,该漏洞源于反射型跨站脚本攻击。

Description (English)

Advantech iView is a software based on a simple network protocol (SNMP) for managing B+ B SmartWorks equipment. The pre-version version of Advantech iView 5.7.05 built 7057 had a cross-site script loophole, which originated in a reflector-type cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

研华

Published

2025-07-11

Last Modified

2026-02-24

References

https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183 https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 https://access.redhat.com/security/cve/cve-2025-41442

Patch

https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183

Share on: