Advantech R-SeeNet - Cross-Site Scripting

披露于 2021/07/16 · 更新于 2025/07/30

CVSS 评分6.1/ 10.0

EPSS 概率77.2%百分位 98.9%

漏洞描述

Advantech R-SeeNet is vulnerable to cross-site scripting via the device_graph_page.php script via the is2sim parameter. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.

影响产品

研华科技r-seenet查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

talosintelligence.comhttps://talosintelligence.com/vulnerability_reports/TALOS-2021-1272↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-21803↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗github.comhttps://github.com/ARPSyndicate/cvemon↗

RELATED INTELLIGENCE

同产品关联漏洞

与 r-seenet 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
rseenet_default_loginRCE Advantech R-SeeNet Default Login r-seenet	高危	8.3	—	PoCEXP	2023/10/20
CVE-2021-21802 Advantech R-SeeNet - Cross-Site Scripting r-seenet	中危	6.1	79.3%	PoCEXP	2021/07/16
CVE-2021-21801 Advantech R-SeeNet - Cross-Site Scripting r-seenet	中危	6.1	85.2%	PoCEXP	2021/07/16
CVE-2021-21800 Advantech R-SeeNet 2.4.12 - Cross-Site Scripting r-seenet	中危	6.1	72.5%	PoCEXP	2021/07/16
CVE-2021-21799 Advantech R-SeeNet 2.4.12 - Cross-Site Scripting r-seenet	中危	6.1	76.0%	PoCEXP	2021/07/16
CVE-2021-21805RCE Advantech R-SeeNet 2.4.12 - OS Command Injection r-seenet	严重	9.8	92.7%	PoCEXP	2021/07/15