CVE-2021-21930

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘snfilter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery...

CVE-2021-21930

CVE-2021-21930 affects Advantech R-SeeNet 2.4.15 (and related entries) with multiple SQL injection vulnerabilities in the device_list page, including filters such as sn_filter, prod_filter, mac_filter, host_filter, name_filter, esn_filter, imei_filter and others. The root cause is improper neutra...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...