Advantech
Advantech R-seenet: vulnerabilidades y CVE
Advantech R-seenet tiene 40 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE40
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-5642 | Crítica (9.8) | 17% | — | 18 oct 2023 | Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information. |
| CVE-2023-3256 | Alta (8.1) | 0.65% | — | 22 jun 2023 | Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files. |
| CVE-2023-2611 | Crítica (9.8) | 0.67% | — | 22 jun 2023 | Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users. |
| CVE-2022-3387 | Media (5.3) | 14% | — | 27 oct 2022 | Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files. |
| CVE-2022-3386 | Crítica (9.8) | 1.3% | — | 27 oct 2022 | Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution. |
| CVE-2022-3385 | Crítica (9.8) | 1.3% | — | 27 oct 2022 | Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution. |
| CVE-2021-21937 | Media (6.5) | 1.2% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or… |
| CVE-2021-21936 | Alta (8.8) | 1.4% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health_alt_filter’ parameter. This can be done as any authenticated user or… |
| CVE-2021-21935 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter2’ parameter. This can be done as any authenticated user or… |
| CVE-2021-21934 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘imei_filter’ parameter. This can be done as any authenticated user or through cross-site… |
| CVE-2021-21933 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This can be done as any authenticated user or through cross-site… |
| CVE-2021-21932 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘name_filter’ parameter. This can be done as any authenticated user or through cross-site… |
| CVE-2021-21931 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or… |
| CVE-2021-21930 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through… |
| CVE-2021-21929 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or… |
| CVE-2021-21928 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through… |
| CVE-2021-21927 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request… |
| CVE-2021-21926 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request… |
| CVE-2021-21925 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request… |
| CVE-2021-21924 | Media (6.5) | 20% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request… |
| CVE-2021-21923 | Media (4.9) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘company_filter’ parameter with the administrative account or through… |
| CVE-2021-21922 | Media (6.5) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘username_filter’ parameter with the administrative account or through… |
| CVE-2021-21921 | Media (4.9) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter with the administrative account or through cross-site… |
| CVE-2021-21920 | Media (4.9) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘surname_filter’ parameter with the administrative account or through… |
| CVE-2021-21919 | Media (4.9) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ord’ parameter. However, the high privilege super-administrator account needs… |
| CVE-2021-21918 | Media (4.9) | 1.1% | — | 22 dic 2021 | A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter. However, the high privilege super-administrator… |
| CVE-2021-21917 | Alta (8.8) | 1.4% | — | 22 dic 2021 | An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP… |
| CVE-2021-21916 | Alta (8.8) | 1.4% | — | 22 dic 2021 | An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at 'description_filter’ parameter. An attacker can make… |
| CVE-2021-21915 | Alta (8.8) | 1.4% | — | 22 dic 2021 | An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at ‘company_filter’ parameter. An attacker can make authenticated… |
| CVE-2021-21912 | Alta (7.8) | 0.38% | — | 22 dic 2021 | A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate… |