Description
Advantech iView 中存在目录遍历漏洞。该漏洞是由于应用程序对用户提供的路径进行了不正确的验证导致的。
Advantech iView CVE-2022-2139 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2023-16478
https://cve.imfht.com/detail/CVE-2022-2139
https://www.cisa.gov/news-events/ics-advisories/icsa-22-179-03
https://nvd.nist.gov/vuln/detail/cve-2022-2139
https://www.cve.org/CVERecord?id=CVE-2022-2139
https://www.zerodayinitiative.com/advisories/ZDI-22-931/
https://vulners.com/search/vendors/advantech/products/iview?score=9
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0759.html/
https://docs.netscaler.com/en-us/citrix-adc/12-1/application-firewall/signature-alerts/signature-update-version-98.html
https://cvedb.shodan.io/dashboard/vulnerabilities?product=iview&page=3