CVE-2021-21910: High severity advantech r-seenet vulnerability

Published Dec 22, 2021

Updated

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

2 affected components

Advantech R-seenet=2.4.15

Microsoft Windows

Event History

Dec 22, 2021

CVE Published

via MITRE·06:06 PM

Data Sourced

via MITRE·06:06 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for the privilege escalation vulnerability in Advantech R-SeeNet?

The vulnerability ID for the privilege escalation vulnerability in Advantech R-SeeNet is CVE-2021-21910.

What is the affected software version of the privilege escalation vulnerability in Advantech R-SeeNet?

The affected software version of the privilege escalation vulnerability in Advantech R-SeeNet is 2.4.15.

How severe is the privilege escalation vulnerability in Advantech R-SeeNet?

The severity of the privilege escalation vulnerability in Advantech R-SeeNet is high with a CVSS score of 7.8.

How can the privilege escalation vulnerability in Advantech R-SeeNet be exploited?

The privilege escalation vulnerability in Advantech R-SeeNet can be exploited by providing a specially-crafted file to escalate privileges to NT SYSTEM authority.

Is there a patch available to fix the privilege escalation vulnerability in Advantech R-SeeNet?

At the time of writing, there is no information available about a patch to fix the privilege escalation vulnerability in Advantech R-SeeNet. It is recommended to follow the vendor's advisories for updates and mitigations.