Advantech R-SeeNet 2.4.15

CPE Details

Advantech R-SeeNet 2.4.15
advantech
r-seenet
2.4.15
2021-08-02
10h45 +00:00
2021-08-05
10h17 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:advantech:r-seenet:2.4.15:*:*:*:*:*:*:*

Informations

Vendor

advantech

Product

r-seenet

Version

2.4.15

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-2611 2023-06-22 16h22 +00:00 Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.
9.8
Critique
CVE-2023-3256 2023-06-22 16h21 +00:00 Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.
8.8
Haute
CVE-2022-3387 2022-10-27 20h47 +00:00 Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files.
6.5
Moyen
CVE-2022-3386 2022-10-27 20h34 +00:00 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution.
9.8
Critique
CVE-2022-3385 2022-10-27 20h16 +00:00 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution.
9.8
Critique
CVE-2021-21937 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21936 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
8.8
Haute
CVE-2021-21935 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter2’ parameter. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21934 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘imei_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21933 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21932 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘name_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21930 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21931 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21929 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21928 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
6.5
Moyen
CVE-2021-21926 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘health_filter’ parameter.
6.5
Moyen
CVE-2021-21927 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘loc_filter’ parameter.
6.5
Moyen
CVE-2021-21925 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘firm_filter’ parameter.
6.5
Moyen
CVE-2021-21924 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘desc_filter’ parameter.
6.5
Moyen
CVE-2021-21923 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘company_filter’ parameter with the administrative account or through cross-site request forgery.
4.9
Moyen
CVE-2021-21922 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘username_filter’ parameter with the administrative account or through cross-site request forgery.
6.5
Moyen
CVE-2021-21920 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘surname_filter’ parameter with the administrative account or through cross-site request forgery.
4.9
Moyen
CVE-2021-21921 2021-12-22 17h07 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter with the administrative account or through cross-site request forgery.
4.9
Moyen
CVE-2021-21919 2021-12-22 17h06 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ord’ parameter. However, the high privilege super-administrator account needs to be used to achieve exploitation without cross-site request forgery attack.
4.9
Moyen
CVE-2021-21918 2021-12-22 17h06 +00:00 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter. However, the high privilege super-administrator account needs to be used to achieve exploitation without cross-site request forgery attack.
4.9
Moyen
CVE-2021-21916 2021-12-22 17h06 +00:00 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at 'description_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
8.8
Haute
CVE-2021-21917 2021-12-22 17h06 +00:00 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
8.8
Haute
CVE-2021-21915 2021-12-22 17h06 +00:00 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at ‘company_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.
8.8
Haute
CVE-2021-21911 2021-12-22 17h06 +00:00 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
7.8
Haute
CVE-2021-21912 2021-12-22 17h06 +00:00 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
7.8
Haute
CVE-2021-21910 2021-12-22 17h06 +00:00 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
7.8
Haute