Advantech R-SeeNet
view advisory published 2020-10-15
Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the R-SeeNet database.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25157US | high7.5 | — | ||
The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationR-SeeNet
Advantech recommends updating to Version 2.4.11 or later. See Advantech Czech's security advisory for more information.
https://ep.advantech-bb.cz/products/software/r-seenet
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan