Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-16470
HistoryOct 24, 2022 - 12:00 a.m.

Advantech R-SeeNet Stack Buffer Overflow Vulnerability

2022-10-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.1%

Advantech R-SeeNet is an industrial monitoring software from Advantech (China). The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet 2.4.17 and previous versions are vulnerable to a stack buffer overflow vulnerability, which can be exploited by an unauthorized attacker to cause remote code execution via a stack buffer overflow with an excessively long file name.

CPENameOperatorVersion
advantech r-seenetle2.4.17

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.1%

Related for CNVD-2023-16470