R Seenet CVE-2023-3256

HIGH

External Control of File Name or Path (CWE-73)

2023-06-22 ics-cert@hq.dhs.gov

Information Disclosure R Seenet

8.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Jun 22, 2023 - 17:15 nvd

HIGH 8.1

DescriptionNVD

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

AnalysisAI

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-73. Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files. Affected products include: Advantech R-Seenet.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in R Seenet

View all

CVE-2023-5642 CRITICAL Act Now POC

Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, whi

CVE-2021-21805 CRITICAL Act Now POC

An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.

CVE-2021-21804 CRITICAL Act Now POC

A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12

CVE-2021-21936 HIGH This Week POC

A specially-crafted HTTP request can lead to SQL injection. Rated high severity (CVSS 8.8), this vulnerability is remote

CVE-2021-21917 HIGH This Week POC

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

CVE-2021-21916 HIGH This Week POC

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

CVE-2021-21915 HIGH This Week POC

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021).

CVE-2021-21912 HIGH This Week POC

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-Se

CVE-2021-21911 HIGH This Week POC

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-Se

CVE-2021-21910 HIGH This Week POC

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-Se

CVE-2021-21937 MEDIUM This Month POC

A specially-crafted HTTP request can lead to SQL injection. Rated medium severity (CVSS 6.5), this vulnerability is remo

CVE-2021-21935 MEDIUM This Month POC

A specially-crafted HTTP request can lead to SQL injection. Rated medium severity (CVSS 6.5), this vulnerability is remo

Same weakness CWE-73 – External Control of File Name or Path

View all

CVE-2025-33053 HIGH POC

CVE-2023-4634 CRITICAL POC

CVE-2025-24054 MEDIUM POC

CVE-2025-0111 HIGH

CVE-2024-8517 CRITICAL POC

CVE-2024-55372 CRITICAL POC

CVE-2024-55371 CRITICAL POC

CVE-2025-29709 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2023-3256 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy