Argument Injection Vulnerability in Advantech iView Network Servlet

CVE-2025-52459

What is CVE-2025-52459?

A vulnerability in Advantech iView allows authenticated attackers with user-level privileges to exploit the NetworkServlet.backupDatabase() function. This security flaw arises due to inadequate sanitization of specific parameters, enabling attackers to inject arbitrary arguments directly into a command. Consequently, this exposes sensitive information, including database credentials, heightening the risk of unauthorized access and data breaches.

References