Lucene search
+L

8 matches found

OSV
OSV
added 2022/10/27 9:15 p.m.3 views

CVE-2022-3386

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution...

9.8CVSS6.5AI score0.01202EPSS
Exploits0References1
OSV
OSV
added 2021/12/22 7:15 p.m.4 views

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or...

8.8CVSS5.8AI score0.0138EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.10 views

The vulnerability of the “device_list” component of the monitoring software for Advantech R-SeeNet routers allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the “devicelist” component of the monitoring software for Advantech R-SeeNet routers involves incorrect processing of the namefilter parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks by sending specially crafted SQL...

7.8CVSS6.9AI score0.01144EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.8 views

The vulnerability of the execution of the executable file C:\R-SeeNet\R_SeeNet.exe, which is part of the SnmpMonSvs service for monitoring the status and functions of Advantech R-SeeNet routers, allows a perpetrator to gain increased privileges.

The vulnerability of the executable file C:\R-SeeNet\RSeeNet.exe, which is part of the SnmpMonSvs service for monitoring the status and functions of Advantech R-SeeNet routers, is related to deficiencies in access control to the C:\R-SeeNet directory. Exploiting this vulnerability could allow an...

8.8CVSS7.3AI score0.00314EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/11/22 12:0 a.m.7 views

Advantech R-SeeNet SQL注入漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which can be exploited by remote attackers ...

8.8CVSS6.3AI score0.0138EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.11 views

The vulnerability of the telnet_form.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, allows a intruder to execute arbitrary code.

The vulnerability of the telnetform.php script, a monitoring tool for the functions and status of Advantech R-SeeNet routers, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remote...

6.1CVSS7.5AI score0.12293EPSS
Exploits1References3
OSV
OSV
added 2021/07/16 11:15 a.m.6 views

CVE-2021-21800

Cross-site scripting vulnerabilities exist in the sshform.php script functionality of Advantech R-SeeNet v 2.4.12 20.10.2020. If a user visits a specially crafted URL, it can lead to arbitrary JavaScript code execution in the context of the targeted user’s browser. An attacker can provide a craft...

6.1CVSS6.2AI score0.14115EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/15 12:0 a.m.7 views

Advantech R-SeeNet 跨站脚本漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in the devicegraphpage.php script function of...

9.6CVSS5.8AI score0.099EPSS
Exploits1References3
Rows per page
Query Builder