CVE-2021-21928

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘macfilter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery...

CVE-2021-21928

CVE-2021-21928 affects Advantech R-SeeNet (2.4.x and prior) with multiple SQL injection flaws in the web UI (e.g., device_list.php: mac_filter, desc_filter, loc_filter, prod_filter, sn_filter, etc.). An authenticated user or CSRF can trigger crafted HTTP requests to inject SQL via interpolated qu...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...