Argument Injection Vulnerability in Advantech iView Network Management

CVE-2025-53509

What is CVE-2025-53509?

A security flaw in Advantech iView allows authenticated users with user-level privileges to perform argument injection through the NetworkServlet.restoreDatabase() function. The vulnerability occurs when input parameters are directly passed to a command without adequate sanitization, which may lead to arbitrary command execution. This can expose sensitive information, including database credentials, potentially compromising the integrity and confidentiality of the system.

References