CVE-2022-2143
Advantech iView
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Advantech iView
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
CVE-2022-2143- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
EUVDEUVD-2022-34428
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
EUVD-2022-34428- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4w4w-jrgw-jr5h
The affected product is vulnerable to two instances of command injection, which may allow an...
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
GHSA-4w4w-jrgw-jr5h- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
NVD
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
- Record
CVE-2022-2143- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Advantech iView NetworkServlet Command Injection | 2022-06-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-2143 is a critical vulnerability (CVSS 9.8) in Advantech Iview, published July 22, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.6%, the 99th percentile. No source names a fixed version.