PT-2022-6164 · Advantech · R-Seenet

Rgod · Published 2022-06-06 · Updated 2022-10-28 · CVE-2022-3387

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet versions 2.4.19 and prior

Description The issue is due to incorrect restriction of the directory path name with limited access. An unauthorized attacker could remotely exploit vulnerable PHP code to delete arbitrary files, including .PDF files, through path traversal attacks.

Recommendations For versions 2.4.19 and prior, consider restricting access to the vulnerable PHP code until a patch is available. As a temporary workaround, avoid using the vulnerable out.php file to minimize the risk of exploitation. Restrict access to sensitive files, such as .PDF files, to prevent unauthorized deletion.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-00262

CVE-2022-3387

ZDI-22-1449

Affected Products

R-Seenet

References · 7

• https://bdu.fstec.ru/vul/2023-00262 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3387 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-1449 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3387 · Vendor Advisory
• https://t.me/cibsecurity/52188 · Telegram Post
• https://zerodayinitiative.com/advisories/ZDI-CAN-17391 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-291-01 · Note