2020-06-19 17:02:01 +00:00
{
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ID" : "CVE-2020-14497" ,
2020-07-15 02:01:19 +00:00
"ASSIGNER" : "ics-cert@hq.dhs.gov" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "Advantech iView" ,
"version" : {
"version_data" : [
{
"version_value" : "Versions 5.6 and prior"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"refsource" : "MISC" ,
"name" : "https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01" ,
"url" : "https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01"
2020-07-16 18:01:34 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-847/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-847/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-827/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-827/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-868/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-868/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-852/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-852/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-862/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-862/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-860/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-860/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-846/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-846/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-844/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-844/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-845/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-845/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-855/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-855/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-857/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-857/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-854/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-854/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-864/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-864/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-849/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-849/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-832/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-832/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-835/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-835/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-848/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-848/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-838/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-838/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-850/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-850/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-856/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-856/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-866/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-866/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-842/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-842/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-837/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-837/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-865/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-865/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-851/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-851/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-828/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-828/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-853/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-853/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-843/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-843/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-839/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-839/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-858/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-858/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-830/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-830/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-861/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-861/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-863/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-863/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-869/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-869/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-833/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-833/"
} ,
{
"refsource" : "MISC" ,
"name" : "https://www.zerodayinitiative.com/advisories/ZDI-20-836/" ,
"url" : "https://www.zerodayinitiative.com/advisories/ZDI-20-836/"
2020-07-15 02:01:19 +00:00
}
]
2020-06-19 17:02:01 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2020-07-15 02:01:19 +00:00
"value" : "Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code."
2020-06-19 17:02:01 +00:00
}
]
}
}
