ГлавнаяУязвимости → CVE-2025-13373
7.5высокая

CVE-2025-13373

Описание

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.

CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Источники
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-338-07.jsonhttps://www.advantech.com/zh-tw/support/details/firmware?id=1-HIPU-183https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-07