CVE-2020-14501

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulnerability may allow an attacker to obtain the information of the user table, including the administrator credentials in plain text. An attacker may also delete the administrator account.

• CWE-306
• CWE-306

• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-859/Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-859/Third Party Advisory

Published

Jul 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14496Successful exploitation of this vulnerability for multiple M…9.8
• CVE-2020-14497Advantech iView, versions 5.6 and prior, contains multiple S…9.8
• CVE-2020-14498HMS Industrial Networks AB eCatcher all versions prior to 6.…10
• CVE-2020-14499Advantech iView, versions 5.6 and prior, has an improper acc…7.5
• CVE-2020-1450A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2020-14500Secomea GateManager all versions prior to 9.2c, An attacker …9.8
• CVE-2020-14502The web interface of the 1734-AENTR communication module is …6.1
• CVE-2020-14503Advantech iView, versions 5.6 and prior, has an improper inp…9.8
• CVE-2020-14504The web interface of the 1734-AENTR communication module mis…5.3
• CVE-2020-14505Advantech iView, versions 5.6 and prior, has an improper neu…9.8
• CVE-2020-14506Philips Clinical Collaboration Platform, Versions 12.2.1 and…4.3
• CVE-2020-14507Advantech iView, versions 5.6 and prior, is vulnerable to mu…9.8