QwikSec

Security Database

CVE

CWE

Training

CVE-2020-14501

Published: Jul 15, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulnerability may allow an attacker to obtain the information of the user table, including the administrator credentials in plain text. An attacker may also delete the administrator account.

Vendor	Product	Versions
n/a	Advantech iView	affected `Versions 5.6 and prior`

Weaknesses (CWE)

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-20-859/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.