Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:deviceon\/iservice:1.1.7:*:*:*:*:*:*:*

part: a version: 1.1.7 update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductDeviceon/Iservice (5e6de8dc-9345-5329-9ac9-b804e033bcd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40396 vulnerable 2026-06-03 14:45:23.749861 Details available
HIGH (8.8)
A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-01-28T19:09:28.000Z
Updated: 2025-04-15T19:22:27.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.