Rewterz Threat Advisory – ICS: Multiple Advantech R-SeeNet Vulnerabilities

Severity

High

Analysis Summary

CVE-2023-3256 CVSS:8.8

Advantech R-SeeNet could allow a remote authenticated attacker to bypass security restrictions, caused by the external control of a filename or path. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass authentication and obtain administrative access.

CVE-2023-2611 CVSS:9.8

Advantech R-SeeNet contains default hardcoded credentials. A remote attacker could exploit this vulnerability to gain access to the system.

Impact

• Security Bypass
• Gain Access

Indicators Of Compromise

CVE

• CVE-2023-3256
• CVE-2023-2611

Affected Vendors

Advantech

Affected Products

• Advantech R-SeeNet 2.4.22

Remediation

Upgrade to the latest version of R-SeeNet, available from the Advantech Web site.

Advantech Web site