Advantech iView

CISA advisory about a SQL injection vulnerability (CVE-2025-13373) in Advantech iView versions 5.7.05.7057 and prior. The vulnerability has a CVSS v4 score of 8.7 and is exploitable remotely with low attack complexity. Attackers can inject SQL commands through improperly sanitized SNMP v1 trap requests on port 162, potentially allowing disclosure, modification, or deletion of sensitive data. The vulnerability affects critical manufacturing and IT infrastructure worldwide. Advantech recommends updating to iView v5.8.1 to address the issue.