Threat Investigation
Request a demo

CVE-2025-52459

Medium

Description

A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet.backupDatabase(). This issue requires an authenticated attacker with at least user-level privileges. Certain parameters can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.

SeverityMedium
CVSS6.5
Exploit probability—
ProductiView
PublishedJul 11, 2025
First seenJul 11, 2025
Weakness typeCWE-88CWE-88

How to fix

Update
  • Advantech iView5.7.05 build 7057 or later

Affected products

ProductAffected versionsFixed in
Advantech iViewv < 5.7.05 build 70575.7.05 build 7057

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.