Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-See Net

Summary: Cisco Talos discovered multiple vulnerabilities in Advantech R-SeeNet router monitoring software, including cross-site scripting flaws tracked as TALOS-2021-1270 through TALOS-2021-1272, an OS command execution flaw (TALOS-2021-1274, CVE-2021-21805) triggerable by a crafted HTTP request, and a PHP file inclusion flaw in options.php (TALOS-2021-1273, CVE-2021-21804). Talos disclosed the issues after Advantech issued no official update within the 90-day deadline, and confirmed version 2.4.12 (20.10.2020) could be exploited.
What's compelling: The vendor shipped no fix inside the 90-day window, so every deployment of R-SeeNet 2.4.12 remains exposed to command execution and file inclusion attacks until an update appears.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21799 CVE-2021-21800 CVE-2021-21801 CVE-2021-21803 CVE-2021-21804 CVE-2021-21805
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026