Advantech iView Argument Injection Vulnerability in NetworkServlet.backupDatabase()

An argument injection vulnerability has been identified in Advantech iView, specifically in the NetworkServlet.backupDatabase() method. This vulnerability allows an authenticated attacker with user-level privileges to inject arbitrary arguments into a command, bypassing proper input sanitization. The exploitation of this vulnerability could lead to unauthorized information disclosure, including sensitive database credentials.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, such as database credentials.

Remediation

Users are advised to update to Advantech iView version 5.7.05 build 7057.