Vulnerabilities

Filters

2 selected

40 records

Sort

Vendor: Advantech Component: R-seenet Clear all filters

TI-2023-05193 CVE-2023-5642 · GHSA-4q58-qpcg-q4vf

Advantech R-SeeNet Unauthenticated Read/Write

HIGH 82

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18041 Published 2023-10-18 Fixed in 2.4.23 CWE-200

TI-2023-02441 CVE-2023-2611 · GHSA-86p5-h8pq-p6hx

Advantech R-SeeNet Use of Hard-coded Credentials

MEDIUM 50

Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00668 Published 2023-06-22 No fix listed CWE-798

TI-2023-03051 CVE-2023-3256 · GHSA-79pm-5425-72gv

Advantech R-SeeNet External Control of File Name or Path

MEDIUM 41

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00783 Published 2023-06-22 No fix listed CWE-73

TI-2022-03131 CVE-2022-3387 · GHSA-3qhw-3jqv-hq24

Path traversal in Advantech R-SeeNet

MEDIUM 50

Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.1398 Published 2022-10-27 No fix listed CWE-22

TI-2022-03130 CVE-2022-3386 · GHSA-phvc-rjr5-r475

Stack-based buffer overflow in Advantech R-SeeNet

MEDIUM 52

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01638 Published 2022-10-27 No fix listed CWE-121

TI-2022-03129 CVE-2022-3385 · GHSA-h4vx-4v48-w8jh

Stack-based buffer overflow in Advantech R-SeeNet

MEDIUM 52

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01638 Published 2022-10-27 No fix listed CWE-121

TI-2021-04982 CVE-2021-21937 · GHSA-7r2g-h6w6-6w7r

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01215 Published 2021-12-22 No fix listed CWE-89

TI-2021-04981 CVE-2021-21936 · GHSA-3h88-qhgq-2p27

SQL injection in Advantech

MEDIUM 41

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01425 Published 2021-12-22 No fix listed CWE-89

TI-2021-04980 CVE-2021-21935 · GHSA-fxcv-6wmm-v575

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04979 CVE-2021-21934 · GHSA-rv48-5j5c-5fwr

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04978 CVE-2021-21933 · GHSA-c3w9-8qwg-xcfg

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04977 CVE-2021-21932 · GHSA-38qj-3r5r-c4w8

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04976 CVE-2021-21931 · GHSA-9c7m-299r-4g9f

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04975 CVE-2021-21930 · GHSA-xr7r-23jq-mmmx

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04974 CVE-2021-21929 · GHSA-hrjq-qp4r-jrw6

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04973 CVE-2021-21928 · GHSA-hx3h-9m35-6xcm

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04972 CVE-2021-21927 · GHSA-5cxr-68fg-mvjv

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04971 CVE-2021-21926 · GHSA-jxj8-686p-3mcf

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04970 CVE-2021-21925 · GHSA-5fgp-c4mg-4552

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04969 CVE-2021-21924 · GHSA-xw93-h7ff-35ff

SQL injection in Advantech

MEDIUM 48

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.20155 Published 2021-12-22 No fix listed CWE-89

TI-2021-04968 CVE-2021-21923 · GHSA-w8vc-2hqr-p73g

SQL injection in Advantech

LOW 25

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01172 Published 2021-12-22 No fix listed CWE-89

TI-2021-04967 CVE-2021-21922 · GHSA-rjcg-jvf4-4792

SQL injection in Advantech

LOW 31

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01181 Published 2021-12-22 No fix listed CWE-89

TI-2021-04966 CVE-2021-21921 · GHSA-w987-mjq4-38r9

SQL injection in Advantech

LOW 25

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01172 Published 2021-12-22 No fix listed CWE-89

TI-2021-04965 CVE-2021-21920 · GHSA-5hh3-9v9q-52h9

SQL injection in Advantech

LOW 25

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01172 Published 2021-12-22 No fix listed CWE-89

TI-2021-04964 CVE-2021-21919 · GHSA-h634-xhf8-75fp

SQL injection in Advantech

LOW 25

A specially-crafted HTTP request can lead to SQL injection.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01172 Published 2021-12-22 No fix listed CWE-89