Paper/Archive/CVE-2021-21803

CVE-2021-21803

talos — This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.

EPSS 8%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 94.7.947 × 2018.9 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.

Affected

ProductAffectedFixed inSource

AdvantechAdvantech R-SeeNet 2.4.12 (20.10.2020)–CNA

Scores by source

talos (CNA)9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2021-1272