Main
Vulnerability Database
Exploits
ID:5355 - Exploit for Missing Authentication for Critical Function in iView - CVE-2021-22652
ID:5355 - Exploit for Missing Authentication for Critical Function in iView - CVE-2021-22652
Published: May 9, 2021
Vulnerability identifier: #VU50580
Vulnerability risk: High
CVE-ID: CVE-2021-22652
CWE-ID: CWE-306
Exploitation vector: Remote access
Vulnerable software:
iView
iView
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to missing authentication for access to the affected product’s configuration. A remote attacker can change the configuration and obtain arbitrary code execution.
Remediation
Install updates from vendor's website.