CVE-2021-21916

HIGH 8.8CVE-2021-21916 · Published 22/12/2021 · updated 17/06/2026

In short

CVE-2021-21916 is a HIGH (CVSS 8.8) vulnerability affecting r-seenet (advantech).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
r-seenet advantech	`= 2.4.15`	No fix yet

Description

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at 'description_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.

References

talosintelligence.com/vulnerability_reports/TALOS-2021-1363 · Exploit

More vulnerabilities in r-seenet

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

r-seenet

advantech

= 2.4.15

No fix yet

Description

More vulnerabilities in r-seenet

See all →