✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – Trend Micro Security 2020 and 2021 families code execution

February 12, 2021
Rewterz

Rewterz Threat Alert – Confucious APT Targeting Victims in Pakistan and Kashmir

February 12, 2021

Rewterz Threat Advisory – ICS: Advantech iView Multiple Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-22654

The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information.

CVE-2021-22658

The affected product is vulnerable to a SQL injection, which may allow an attacker to escalate privileges to ‘Administrator’.

CVE-2021-22656

The affected product is vulnerable to directory traversal, which may allow an attacker to read sensitive files.

CVE-2021-22652 

Access to the affected product’s configuration is missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.

Impact

  • SQL Injection 
  • Path Traversal 
  • Missing Authentication for Critical Function

Affected Vendors

Advantech

Affected Products

iView versions prior to v5.7.03.6112

Remediation

Advantech has released Version 5.7.03.6112 of iView to address these reported vulnerabilities.

iView

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo