Skip to content
OpenAdvisories
Critical ICSA-23-173-02 2 CVEs

Advantech R-SeeNet

Published Jun 20, 2023 · Updated Jun 20, 2023

Vendor: Advantech Product: R-SeeNet

Summary

Successful exploitation of these vulnerabilities could allow an attacker to authenticate as a valid user or access files on the system.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-2611

    Advantech R-SeeNet Use of Hard-coded Credentials

    Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.

    Advantech R-SeeNet
  • High 8.8
    CVE-2023-3256

    Advantech R-SeeNet External Control of File Name or Path

    Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

    Advantech R-SeeNet

Revision history

  1. #1

    Initial Publication

References