Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-92432)

Advantech R-SeeNet is an industrial monitoring software from Advantech (Taiwan). The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleaning of user-supplied data in the “stat_filter” parameter of the “sn_filter” page. An attacker can use this vulnerability to execute arbitrary SQL queries in the database.