R-seenet (Advantech) - vulnerabilities (CVEs)

40 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2023-10-18. Vendor: Advantech.

CVEs of R-seenet

CVE-2023-5642 - CVSS 9.8 (critical), 2023-10-18: Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information.
CVE-2023-3256 - CVSS 8.8 (high), 2023-06-22: Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.
CVE-2023-2611 - CVSS 9.8 (critical), 2023-06-22: Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that…
CVE-2022-3387 - CVSS 6.5 (medium), 2022-10-27: Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to…
CVE-2022-3386 - CVSS 9.8 (critical), 2022-10-27: Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to…
CVE-2022-3385 - CVSS 9.8 (critical), 2022-10-27: Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer…
CVE-2021-21937 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at…
CVE-2021-21932 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘name_filter’ parameter. This…
CVE-2021-21916 - CVSS 8.8 (high), 2021-12-22: An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at…
CVE-2021-21935 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at…
CVE-2021-21919 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ord’ parameter.…
CVE-2021-21922 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at…
CVE-2021-21925 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be…
CVE-2021-21928 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_filter’ parameter to trigger this…
CVE-2021-21931 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_filter’ parameter to trigger this…
CVE-2021-21915 - CVSS 8.8 (high), 2021-12-22: An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at…
CVE-2021-21934 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘imei_filter’ parameter. This…
CVE-2021-21918 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’…
CVE-2021-21921 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’…
CVE-2021-21924 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be…
CVE-2021-21927 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be…
CVE-2021-21930 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filter’ parameter to trigger this…
CVE-2021-21912 - CVSS 8.8 (high), 2021-12-22: A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A…
CVE-2021-21933 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This…
CVE-2021-21917 - CVSS 8.8 (high), 2021-12-22: An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at…
CVE-2021-21936 - CVSS 8.8 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at…
CVE-2021-21920 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘surname_filter’…
CVE-2021-21923 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘company_filter’…
CVE-2021-21926 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be…
CVE-2021-21929 - CVSS 7.7 (high), 2021-12-22: A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_filter’ parameter to trigger this…
CVE-2021-21911 - CVSS 8.8 (high), 2021-12-22: A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A…
CVE-2021-21910 - CVSS 8.8 (high), 2021-12-22: A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A…
CVE-2021-21805 - CVSS 9.8 (critical), 2021-08-05: An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted HTTP…
CVE-2021-21800 - CVSS 9.6 (critical), 2021-07-16: Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). If a user visits a specially…
CVE-2021-21803 - CVSS 9.6 (critical), 2021-07-16: This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an…
CVE-2021-21799 - CVSS 9.6 (critical), 2021-07-16: Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). If a user visits a…
CVE-2021-21802 - CVSS 9.6 (critical), 2021-07-16: This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an…
CVE-2021-21801 - CVSS 9.6 (critical), 2021-07-16: This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an…
CVE-2021-21804 - CVSS 9.8 (critical), 2021-07-16: A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted…
CVE-2020-25157 - CVSS 7.5 (high), 2020-10-20: The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve…