CVE-2020-14499 – Advantech iView, versions 5.6 and prior, has an improper access control v

Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14499

Reference (s):

• https://www.zerodayinitiative.com/advisories/ZDI-20-867/
• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
• URL: https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01