CVE-2021-21919

Advantech R-SeeNet contains multiple SQL injection flaws in the web app (notably on the company_list page), caused by improper neutralization of SQL input and dynamic query construction. Exploitation requires an authenticated user with elevated privileges (super-administrator), per TALOS-2021-136...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...