CVE-2022-3385 - Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow

Back Back to CVE browser

CRITICAL

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow

Published Oct 27, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.38%

Description

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution.

Affected products

Vendor Advantech Product R-SeeNet Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=2.4.17

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Advantech

R-SeeNet

unaffected

Version	Status	Constraints
0	affected	<=2.4.17

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42763
Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
government-resourceMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42763		Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01		government-resourceMitigationThird Party AdvisoryUS Government Resource