Mitsubishi Electric MELSEC iQ-R series 资源管理错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. A resource management error vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V, which can be exploited by an attacker to send a large number ...

Advantech R-SeeNet ssh_form.php Cross-Site Scripting (CVE-2021-21800)

A cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability is due to improper input validation in sshform.php...

CVE-2021-41583: Improper Input Validation

vpn-user-portal aka eduVPN or Let's Connect! before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option. This can be leveraged to obtain additional V...

PT-2021-4477 · Unknown · Vpn-User-Portal

Name of the Vulnerable Software and Affected Versions: vpn-user-portal versions prior to 2.3.14 Description: The issue arises from insufficient input validation in the vpn-user-portal software, allowing remote authenticated users to obtain OS filesystem access due to the interaction of QR codes...

The vulnerability of the ssh_form.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, allows a hacker to execute arbitrary code.

The vulnerability of the sshform.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the telnet_form.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, allows a intruder to execute arbitrary code.

The vulnerability of the telnetform.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remote...

Mitsubishi Electric MELSEC iQ-R Series

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Corporation Equipment : MELSEC iQ-R Series CPU Module Vulnerabilities : Exposure of Sensitive Information to an Unauthorized Actor, Insufficiently Protected Credentials, Overly Restrictive...

FANUC Robot Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: FANUC Equipment: R-30iA and R-30iB series controllers Vulnerabilities: Integer Coercion Error, Out-of-bounds Write 2. UPDATE INFORMATION This advisory is a follow-up to the original advisory titled ICSA-21-243-02P FANUC...

Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)

A command injection vulnerability exists in Advantech R-SeeNet. The vulnerability is due to insufficient validation of the parameter in ping.php...

PT-2021-4946 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.15 Description: The issue is related to insufficient access restrictions to the C:R-SeeNet directory, which can be exploited by an attacker to escalate privileges using a specially crafted malicious file. This c...

PT-2021-4939 · Advantech +1 · Advantech R-Seenet +1

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.15 Description: A privilege escalation issue exists in the Windows version of Advantech R-SeeNet, related to insufficient access control to the directory C:R-SeeNet. This can allow an attacker to elevate their...

PT-2021-6938

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.15 Description A privilege escalation issue exists due to insufficient access restrictions to the C:R-SeeNet directory. This can be exploited by an attacker using a specially crafted malicious file to elevate...

PT-2021-5480

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to a SQL injection vulnerability. It can be triggered by making authenticated HTTP requests to the company filter parameter, potentially through cross-site...

PT-2021-5371

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the mac filter parameter in the device list component, which can lead to SQL injection. An attacker can exploit this by making...

PT-2021-5489

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description A specially-crafted HTTP request can lead to SQL injection, allowing an attacker to execute arbitrary SQL queries. This can be triggered by making authenticated HTTP requests,...

PT-2021-5445

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the sn filter parameter in the device list component, allowing an attacker to conduct SQL injection attacks. This can be triggered...

PT-2021-5496

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.15 Description The issue is related to a lack of protection against SQL injection attacks in the company filter parameter of the group list page. This can be exploited by sending specially crafted SQL queries,...

PT-2021-5155

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description A specially-crafted HTTP request can lead to SQL injection, allowing an attacker to make authenticated HTTP requests at the stat filter parameter to trigger this issue. This can be...

PT-2021-5149

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the name filter parameter in the device list component of the Advantech R-SeeNet monitoring software. This can allow a remote...

PT-2021-5148

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the esn filter parameter in the device list component of the Advantech R-SeeNet monitoring software. This can allow a remote...