Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

披露于 2021/07/16 · 更新于 2025/07/30

CVSS 评分6.1/ 10.0

EPSS 概率72.5%百分位 98.7%

漏洞描述

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the ssh_form.php script functionality.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 r-seenet 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
rseenet_default_loginRCE Advantech R-SeeNet Default Login r-seenet	高危	8.3	—	PoCEXP	2023/10/20
CVE-2021-21803 Advantech R-SeeNet - Cross-Site Scripting r-seenet	中危	6.1	77.2%	PoCEXP	2021/07/16
CVE-2021-21802 Advantech R-SeeNet - Cross-Site Scripting r-seenet	中危	6.1	79.3%	PoCEXP	2021/07/16
CVE-2021-21801 Advantech R-SeeNet - Cross-Site Scripting r-seenet	中危	6.1	85.2%	PoCEXP	2021/07/16
CVE-2021-21799 Advantech R-SeeNet 2.4.12 - Cross-Site Scripting r-seenet	中危	6.1	76.0%	PoCEXP	2021/07/16
CVE-2021-21805RCE Advantech R-SeeNet 2.4.12 - OS Command Injection r-seenet	严重	9.8	92.7%	PoCEXP	2021/07/15