CVE-2021-21911: High severity advantech r-seenet vulnerability

Published Dec 22, 2021

Updated

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

2 affected components

Advantech R-seenet=2.4.15

Microsoft Windows

Event History

Dec 22, 2021

CVE Published

via MITRE·06:06 PM

Data Sourced

via MITRE·06:06 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21911?

CVE-2021-21911 is a privilege escalation vulnerability in the Windows version of installation for Advantech R-SeeNet.

How does CVE-2021-21911 impact systems?

CVE-2021-21911 allows an attacker to escalate privileges to NT SYSTEM authority by replacing a specially-crafted file in the system.

What is the severity of CVE-2021-21911?

CVE-2021-21911 has a severity rating of 7.8 (High).

Which software versions are affected by CVE-2021-21911?

Advantech R-SeeNet version 2.4.15 is affected by CVE-2021-21911.

Is Microsoft Windows affected by CVE-2021-21911?

No, Microsoft Windows is not affected by CVE-2021-21911.

How can I fix CVE-2021-21911?

Updating Advantech R-SeeNet to a patched version is recommended to fix CVE-2021-21911.

Where can I find more information about CVE-2021-21911?

You can find more information about CVE-2021-21911 at the following link: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1360

What are the Common Weakness Enumerations (CWE) associated with CVE-2021-21911?

CVE-2021-21911 is associated with CWE-269 (Improper Privilege Management) and CWE-276 (Incorrect Default Permissions).