CVE-2022-2138CWE-306
Advantech iView
High · published July 22, 2022
What it is
The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.11595 · 96.0th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2022-07-22T14:58Z
EPSS history
Timeline
22 JUL 14:58Z
Advantech iView
cvelistv5