Skip to content
OpenAdvisories
Critical ICSA-21-054-03 5 CVEs

Advantech Spectre RT Industrial Routers

Published Feb 23, 2021 · Updated Feb 23, 2021

Vendor: Advantech Product: Spectre RT ERT351

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.

Vulnerabilities 5

  • High 7.5
    CVE-2016-6301

    The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of s…

    busybox busybox Debian Alpine
  • High 7.5
    CVE-2018-20679

    An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP serve…

    busybox busybox busybox Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-18231

    Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may…

  • Unscored —
    CVE-2019-18233

    In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special cha…

  • Unscored —
    CVE-2019-18235

    Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the …

Revision history

  1. #1

    ICSA-21-054-03 Advantech Spectre RT Industrial Routers

References