Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93829)

Advantech R-SeeNet is an industrial monitoring software from Advantech (Taiwan). The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleanup of user-supplied data in the “imei_filter” parameter on the “sn_filter” page. An attacker can use this vulnerability to execute arbitrary SQL queries in the database.