Advantech iView
4 december 2025 om 12:00:00
cisa.gov
CISA published an advisory for CVE-2025-13373, a SQL injection vulnerability in Advantech iView version 5.7.05.7057 and prior. The vulnerability has a CVSS v4 score of 8.7 and is remotely exploitable with low attack complexity. The flaw affects SNMP v1 trap requests on port 162, allowing attackers to inject SQL commands and potentially disclose sensitive information, modify, or delete data. Advantech recommends updating to iView v5.8.1. The vulnerability affects critical manufacturing and information technology sectors worldwide. No known public exploitation has been reported to CISA at this time.
Related links:
Related CVE's:
Related threat actors:
No threat actors found in this article
Affected products:
IOC's:
No IOCs found in this article