CVE-2025-46704Advantech iView Path Traversal

Descripción

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 Third Party AdvisoryUS Government Resource
• https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183 Product