Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet

guest · Nov 22, 2021

Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet
November 22, 2021
https://blog.talosintelligence.com/2021/11/re-see-net-advantched-vuln-spotlight.html

Cisco Talos recently discovered multiple vulnerabilities in the Advantech R-SeeNet monitoring software.

R-SeeNet is the software system used for monitoring Advantech routers. It continuously collects information from individual routers in the network and records the data into a SQL database. The vulnerabilities Talos discovered exist in various scripts inside of R-SeeNet's web applications.
Click to expand...

TALOS-2021-1366 (several CVEs, please refer to advisory for more information), TALOS-2021-1365 (CVE-2021-21920, CVE-2021-21921, CVE-2021-21922, CVE-2021-21923), TALOS-2021-1363 (CVE-2021-21915, CVE-2021-21916, CVE-2021-21917) and TALOS-2021-1364 (CVE-2021-21918, CVE-2021-21919) are SQL injection vulnerabilities that exist in various R-SeeNet pages.

TALOS-2021-1360 (CVE-2021-21910, CVE-2021-21911, CVE-2021-21912) that only exists in the Windows version of the software. An attacker could exploit this vulnerability to place a specially-crafted file on the system to escalate privileges to NT SYSTEM authority.
Click to expand...

Users are encouraged to update these affected products as soon as possible: Advantech R-SeeNet, version 2.4.15 (30.07.2021). Talos tested and confirmed these versions of R-SeeNet could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet

guest Guest

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet

guest Guest

Useful Searches