Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an attacker to remotely execute arbitrary code.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14503
Reference (s):
- https://www.zerodayinitiative.com/advisories/ZDI-20-834/
- https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
- URL: https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01