Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93822)

Advantech R-SeeNet is an industrial monitoring software from Advantech (Taiwan). The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which is caused by insufficient cleaning of user-supplied data in the “company_filter” parameter of the “user_list” page. An attacker can exploit this vulnerability to execute arbitrary SQL queries in the database.