HTTP: Advantech iView Multiple Directory Traversal
This signature detects attempts to exploit a known vulnerability against Advantech iView. A successful attack can lead to directory traversal and arbitrary code execution.
Extended Description
Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code.
Affected Products
Advantech iview
Short Name
HTTP:DIR:ADVTECH-IVIEW-DIRTRV
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Advantech CVE-2020-16245 CVE-2021-22656 CVE-2022-2139 Directory Multiple Traversal iView
Release Date
01/19/2021
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Advantech
CVSS Score
7.5
5.0