CVE-2022-2143: advantech iview iview Command Injection
Vulnerability summary
CVE-2022-2143 is a critical (CVSS 9.8) Command Injection vulnerability in advantech iview iview. EPSS estimates a 60.34% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 22-07-2022PublishedVulnerability first disclosed.
- 16-04-2025Last modifiedVulnerability information updated.
Description
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
60.34%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.93 pp
From 59.41% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Advantech iView NetworkServlet Command Injection
exploit/windows/http/advantech_iview_networkservlet_cmd_inject
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
2 vendors · 2 products
References
2 links
www.cisa.gov/uscert/ics/advisories/icsa-22-179-03X Refsource MISCThird Party AdvisoryUS Government Resource- packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry