PT-2021-3933 · Advantech · Advantech R-Seenet

Published 2021-07-15 · Updated 2022-09-30 · CVE-2021-21800

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.12

Description The issue exists in the ssh form.php script functionality, allowing for cross-site scripting vulnerabilities. If a user visits a specially crafted URL, it can lead to arbitrary JavaScript code execution in the context of the targeted user’s browser. An attacker can provide a crafted URL to trigger this vulnerability, potentially allowing a remote attacker to execute arbitrary code.

Recommendations For Advantech R-SeeNet version 2.4.12, consider disabling the ssh form.php script functionality until a patch is available to prevent exploitation. Restrict access to the vulnerable script to minimize the risk of arbitrary JavaScript code execution. Avoid using crafted URLs that could trigger this issue until the vulnerability is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-04450

CVE-2021-21800

Affected Products

Advantech R-Seenet

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1271 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-21800 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21800 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04450 · Security Note
• https://t.me/cvenotify/36962 · Telegram Post
• https://vuldb.com/?id.178809 · Note
• https://t.me/cvenotify/18174 · Telegram Post