Browse CVEs

HIGH 8.8 CVE-2023-2573 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which c… Eki 1521 Firmware after 1.21 Fix from $1,9502023-05-08 HIGH 8.8 CVE-2023-2574 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which … Eki 1521 Firmware after 1.21 Fix from $1,9502023-05-08 HIGH 8.8 CVE-2023-2575EPSS 15% Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by au… Eki 1521 Firmware after 1.21 Fix from $1,9502023-05-08 CRITICAL 9.8 CVE-2022-3385 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stac… R Seenet after 2.4.17 Fix from $2,3002022-10-27 CRITICAL 9.8 CVE-2022-3386 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename t… R Seenet after 2.4.17 Fix from $2,3002022-10-27 MEDIUM 5.3 CVE-2022-3387EPSS 14% Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP… R Seenet after 2.4.19 Fix from $1,6002022-10-27 HIGH 7.5 CVE-2022-3323EPSS 31% An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TC… Iview No fix yet Fix from $1,9502022-09-27 CRITICAL 9.8 CVE-2022-2139EPSS 15% The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code. Iview 5.7.04.6469+ Fix from $2,3002022-07-22 CRITICAL 9.8 CVE-2022-2143EPSS 59% The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code. Iview 5.7.04.6469+ Fix from $2,3002022-07-22 HIGH 7.5 CVE-2022-2135EPSS 10% The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information. Iview 5.7.04.6469+ Fix from $1,9502022-07-22 HIGH 7.5 CVE-2022-2138EPSS 11% The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary … Iview 5.7.04.6469+ Fix from $1,9502022-07-22 MEDIUM 6.5 CVE-2022-2136EPSS 9% The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to … Iview 5.7.04.6469+ Fix from $1,6002022-07-22 MEDIUM 5.9 CVE-2022-2142 The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information. Iview 5.7.04.6469+ Fix from $1,6002022-07-22 CRITICAL 9.8 CVE-2022-22987 The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and per… Adam 3600 Firmware after 2.6.2 Fix from $2,3002022-02-04 HIGH 8.8 CVE-2021-40388 A privilege escalation vulnerability exists in Advantech SQ Manager Server 1.0.6. A specially-crafted file can be replaced in the system to escalate … Sq Manager No fix yet Fix from $1,9502022-01-28 HIGH 8.8 CVE-2021-40389 A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in… Deviceon\/iedge No fix yet Fix from $1,9502022-01-28 HIGH 8.8 CVE-2021-40396 A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the… Deviceon\/iservice No fix yet Fix from $1,9502022-01-28 HIGH 7.8 CVE-2021-40397 A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in … Wise Paas\/ota No fix yet Fix from $1,9502022-01-28 MEDIUM 6.5 CVE-2021-21937 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_a… R Seenet No fix yet Fix from $1,6002021-12-22 HIGH 8.8 CVE-2021-21915 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP req… R Seenet No fix yet Fix from $1,9502021-12-22 HIGH 8.8 CVE-2021-21916 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP req… R Seenet No fix yet Fix from $1,9502021-12-22 HIGH 8.8 CVE-2021-21917 An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP req… R Seenet No fix yet Fix from $1,9502021-12-22 HIGH 8.8 CVE-2021-21936 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health… R Seenet No fix yet Fix from $1,9502021-12-22 HIGH 7.8 CVE-2021-21911 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A s… R Seenet No fix yet Fix from $1,9502021-12-22 HIGH 7.8 CVE-2021-21912 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A s… R Seenet No fix yet Fix from $1,9502021-12-22 MEDIUM 6.5 CVE-2021-21922 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘userna… R Seenet No fix yet Fix from $1,6002021-12-22 MEDIUM 6.5 CVE-2021-21924EPSS 20% A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This c… R Seenet No fix yet Fix from $1,6002021-12-22 MEDIUM 6.5 CVE-2021-21925 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This c… R Seenet No fix yet Fix from $1,6002021-12-22 MEDIUM 6.5 CVE-2021-21926 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This c… R Seenet No fix yet Fix from $1,6002021-12-22 MEDIUM 6.5 CVE-2021-21927 A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This c… R Seenet No fix yet Fix from $1,6002021-12-22