Advantech iView Argument Injection Vulnerability in NetworkServlet.restoreDatabase()

An argument injection vulnerability has been identified in Advantech iView versions prior to 5.7.05 build 7057. This vulnerability allows an authenticated attacker with user-level privileges to inject arbitrary arguments into a command via an input parameter, which is executed without proper sanitization. The exploitation of this vulnerability could lead to unauthorized information disclosure, including sensitive database credentials.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive database information, including credentials.

Remediation

Users are advised to update to Advantech iView version 5.7.05 build 7057.