CVE-2021-21929

CVE-2021-21929 affects Advantech R-SeeNet. Multiple SQL injection vulnerabilities exist in the device_list page via numerous filters (e.g., prod_filter), due to how user/session inputs are incorporated into dynamic SQL. Exploitation can be performed by authenticated users (and may be CSRF-enabled...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...