CVE-2023-3256: Advantech R-SeeNet External Control of File Name or Path

Q: What is CVE-2023-3256?

CVE-2023-3256 is a vulnerability in Advantech R-SeeNet versions 2.4.22 that allows low-level users to access and load the content of local files.

Q: How severe is CVE-2023-3256?

CVE-2023-3256 has a severity score of 8.1 (high).

Q: How does CVE-2023-3256 affect Advantech R-SeeNet?

CVE-2023-3256 affects Advantech R-SeeNet versions 2.4.22.

Q: How can I fix CVE-2023-3256?

To fix CVE-2023-3256, it is recommended to update to a version of Advantech R-SeeNet that is not affected by the vulnerability.

Q: Are there any references for CVE-2023-3256?

Yes, you can find more information about CVE-2023-3256 at the following reference: [CISA Advisory](https://www.cisa.gov/news-events/ics-advisories/icsa-23-173-02)

Published Jun 22, 2023

Updated

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

Affected Software

2 affected components

Advantech R-SeeNet<=2.4.22

Advantech R-SeeNet: versions 2.4.22 and prior

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Advantech R-SeeNet to a version that resolves this vulnerability.
Fixed in 2.4.23

Event History

Jun 22, 2023

CVE Published

via MITRE·04:21 PM

Data Sourced

via MITRE·04:21 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-173-02

Frequently Asked Questions

What is CVE-2023-3256?

CVE-2023-3256 is a vulnerability in Advantech R-SeeNet versions 2.4.22 that allows low-level users to access and load the content of local files.

How severe is CVE-2023-3256?