CVE-2025-46704: Advantech Iview

Medium severity, CVSS 4.3. EPSS: 4.7% chance of exploitation in the next 30 days.

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.

Affected products

• Advantech Iview: before 5.7.05.7057 (fixed in 5.7.05.7057)

Published 2025-07-11. Last modified 2026-06-17.