Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-92261
HistoryJul 16, 2021 - 12:00 a.m.

Advantech R-SeeNet ping.php OS Command Injection Vulnerability

2021-07-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.972 High

EPSS

Percentile

99.8%

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms, and is available for Linux and Windows platforms.An OS command injection vulnerability exists in Advantech R-SeeNet ping.php, which stems from the failure to properly filter user input for special characters, commands, etc. in the ping.php script function. An attacker could use this vulnerability to execute arbitrary OS commands.

0.972 High

EPSS

Percentile

99.8%