CVE-2020-14505

Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any validation. The attacker may then remotely execute code.

• CWE-77
• CWE-74

• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-831/Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-831/Third Party Advisory

Published

Jul 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1450A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2020-14500Secomea GateManager all versions prior to 9.2c, An attacker …9.8
• CVE-2020-14501Advantech iView, versions 5.6 and prior, has an improper aut…9.8
• CVE-2020-14502The web interface of the 1734-AENTR communication module is …6.1
• CVE-2020-14503Advantech iView, versions 5.6 and prior, has an improper inp…9.8
• CVE-2020-14504The web interface of the 1734-AENTR communication module mis…5.3
• CVE-2020-14506Philips Clinical Collaboration Platform, Versions 12.2.1 and…4.3
• CVE-2020-14507Advantech iView, versions 5.6 and prior, is vulnerable to mu…9.8
• CVE-2020-14508GateManager versions prior to 9.2c, The affected product is …9.8
• CVE-2020-14509Multiple memory corruption vulnerabilities exist in CodeMete…9.8
• CVE-2020-1451A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2020-14510GateManager versions prior to 9.2c, The affected product con…9.8