ICS Advantech iView NetworkServlet archiveTrapRange SQL Injection -1 (CVE-2025-52577)

Rule ID

1237527

Severity

High

Description

An SQL injection vulnerability has been reported in Advantech iView. The vulnerability is due to improper validation of user inputs in the archiveTrapRange method of the NetworkServlet class. A remote, authenticated user could exploit the vulnerability by sending crafted requests to the server. Successful exploitation could result in execution of arbitrary SQL commands on the target server.

Impact

SQL injection

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A