CVE-2023-2611

Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users...

PT-2023-3612 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.22 Description: The issue is related to incorrect external control of a file name or path, allowing a remote attacker to gain unauthorized access to local files by sending specially crafted HTTP requests. This c...

Advantech R-SeeNet imei_filter Disclosure

The vulnerability of the imeifilter parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

implementation of the executable Privilege Escalation

The vulnerability of the executable file C:\R-SeeNet\apache\bin\httpd.exe, which is used by the monitoring software for routers of the Advantech R-SeeNet family, is related to deficiencies in access control to the C:\R-SeeNet directory. Exploiting this vulnerability could allow an attacker to...