Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93825)

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleaning of user-supplied data in the “host_alt_filter” parameter of the “sn_filter” page. An attacker can use this vulnerability to execute arbitrary SQL queries in the database.