Lucene search
+L

322 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/09/19 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-21801

This vulnerability is present in devicegraphpage.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution...

9.6CVSS8.3AI score0.63415EPSS
SaveIn wildExploits2References4
VulnCheck KEV
VulnCheck KEV
•added 2023/12/24 12:00 a.m.•12 views

VulnCheck KEV: CVE-2021-21805

An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 20.10.2020. A specially crafted HTTP request can lead to arbitrary OS command execution. An attacker can send a crafted HTTP request to trigger this vulnerability...

10CVSS8.8AI score0.69842EPSS
SaveIn wildExploits2References535
CNVD
CNVD
•added 2023/10/23 12:00 a.m.•50 views

Advantech R-SeeNet Information Disclosure Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech, China. An information disclosure vulnerability exists in Advantech R-SeeNet, which can be exploited by an attacker to obtain login credentials and the default SNMP group string from the snmpmon.ini file and use this informati...

9.8CVSS6.2AI score0.18041EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2023/10/19 12:00 a.m.•22 views

Advantech R-SeeNet Router Operational Data Exposure

The vulnerability of the monitoring software for the status and functions of Advantech R-SeeNet routers lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the database by reading and writing data ...

10CVSS7.8AI score0.18041EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/10/18 4:15 p.m.•44 views

CVE-2023-5642

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information...

9.8CVSS9.5AI score0.18041EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/18 4:15 p.m.•31 views

Information disclosure

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information...

7.5CVSS9.3AI score0.18041EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/10/18 3:04 p.m.•44 views

CVE-2023-5642 Advantech R-SeeNet Unauthenticated Read/Write

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information...

9.8CVSS9.6AI score0.18041EPSS
SaveExploits1References1
CVE
CVE
•added 2023/10/18 3:04 p.m.•91 views

CVE-2023-5642

Advantech R-SeeNet v2.4.23 is affected by CVE-2023-5642. An unauthenticated remote attacker can read from and write to the snmpmon.ini file, which contains sensitive information, enabling information disclosure and potential further compromise. CVSS v3.1 metrics from NVD/Vuln reports indicate CRI...

9.8CVSS9.5AI score0.18041EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/18 3:04 p.m.•16 views

CVE-2023-5642 Advantech R-SeeNet Unauthenticated Read/Write

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information...

9.8CVSS7.2AI score0.18041EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•27 views

Advantech R-SeeNet security vulnerabilities

Advantech R-SeeNet is an industrial monitoring software from Advantech, China. An information disclosure vulnerability exists in Advantech R-SeeNet, which can be exploited by an attacker to obtain login credentials and the default SNMP group string from the snmpmon.ini file and use this informati...

9.8CVSS6.2AI score0.18041EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/10/18 12:00 a.m.•8 views

PT-2023-6175

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.23 Description The issue is related to the lack of protection for service data in the Advantech R-SeeNet software, which is used for monitoring the state and functions of routers. This can be exploited by a remot...

10CVSS6AI score0.18041EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•11 views

CVE-2023-5642: Exposure of Sensitive Information to an Unauthorized Actor

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information...

9.8CVSS8.2AI score0.18041EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2023/08/21 12:00 a.m.•54 views

Advantech R-SeeNet device_status Local File Inclusion Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Advantech R-SeeNet. Authentication is required to exploit this vulnerability. The specific flaw exists within the devicestatus page. The issue results from the lack of proper validation of user-supplied...

8.8CVSS6.8AI score0.00783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/21 12:00 a.m.•35 views

Advantech R-SeeNet Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Advantech R-SeeNet. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the database. The issue results from the existence of an addition...

9.8CVSS6.9AI score0.00668EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•20 views

Advantech R-SeeNet Router Unauthorized Access

The vulnerability of the monitoring software for the functions and status of Advantech R-SeeNet routers is related to improper external manipulation of the file name or file path. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to local...

9CVSS7.4AI score0.00783EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2023/06/27 12:00 a.m.•30 views

Advantech R-SeeNet Trust Management Issue Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech, China. A security vulnerability exists in Advantech R-SeeNet, which can be exploited by an authenticated, remote attacker to submit a special request for unauthorized access to the system...

9.8CVSS6.8AI score0.00668EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/06/27 12:00 a.m.•25 views

Advantech R-SeeNet Privilege Escalation

The vulnerability of the monitoring software for the status and functions of Advantech R-SeeNet routers lies in the possibility of using strictly encrypted login data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

10CVSS7.7AI score0.00668EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2023/06/22 5:15 p.m.•24 views

CVE-2023-3256

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files...

8.1CVSS5.8AI score0.00783EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/22 5:15 p.m.•53 views

CVE-2023-2611

Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users...

9.8CVSS9.6AI score0.00668EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/22 5:15 p.m.•43 views

CVE-2023-3256

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files...

8.8CVSS8.6AI score0.00783EPSS
SaveExploits0References1
Rows per page
Query Builder