HTTP: Advantech iView MenuServlet getUserPrefMenuFragment Directory Traversal

This signature detects attempts to exploit a known vulnerability against Advantech iView MenuServlet. A successful attack can lead to directory traversal and arbitrary code execution.

Extended Description

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

Affected Products

Advantech iview

Short Name
HTTP:DIR:ADVTECH-IVIEW-DIRTRV2
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Advantech CVE-2022-2135 CVE-2025-46704 Directory MenuServlet Traversal getUserPrefMenuFragment iView
Release Date
09/12/2022
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3847
False Positive
Unknown
Vendors

Advantech

Found a potential security threat?