Advantech iView SQL Injection Vulnerability via SNMP v1 Traps

A SQL injection vulnerability has been identified in Advantech iView versions through 5.7.05.7057. The issue arises because the application does not properly sanitize SNMP v1 trap requests received on Port 162. This lack of input validation could allow an attacker to inject malicious SQL commands, potentially leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability could allow an attacker to inject SQL commands, with the potential to disclose, modify, or delete data.

Remediation

Advantech recommends users update to iView version 5.8.1.