S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2021-21800 Scanner

CVE-2021-21800 scanner - Cross-Site Scripting (XSS) vulnerability in Advantech R-SeeNet

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.2k
Times Used
continuous scan runs
4.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2021-21800
6.1
CVSScritical
Exploitable remotely over the internet · no authentication required · user interaction needed.

Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). If a user visits a specially crafted URL, it can lead to arbitrary JavaScript code execution in the context of the targeted user’s browser. An attacker can provide a crafted URL to trigger this vulnerability.

Attack Vector
Network
Privileges Req.
None
User Interaction
Required
Affected
Advantechby n/a
Advantech R-SeeNet 2.4.12 (20.10.2020)
Updated Aug 21, 2026View on NVD →
Detail

R-SeeNet is a network management software developed by Advantech, a global leader in industrial IoT solutions. This software is designed to enable remote asset management and monitoring, ensuring stable and secure data transmissions. R-SeeNet is a powerful tool for streamlining network management processes and improving overall network performance. It is widely used in various industrial settings, including factories, transportation, and energy sectors.

The CVE-2021-21800 vulnerability detected in R-SeeNet version 2.4.12 exposes users to cross-site scripting attacks. When a user visits a maliciously designed URL, this vulnerability permits arbitrary JavaScript code execution in the victim's browser. As a result of this vulnerability, cybercriminals can hijack web sessions, gain unauthorized access to confidential data and launch unauthorized actions on behalf of the targeted user.

Exploiting the CVE-2021-21800 vulnerability in R-SeeNet may lead to a series of malicious actions such as data theft, website defacement, login credential theft, and malware injection. In addition, since the vulnerability can remain undetected for some time, an attacker may have an extended time frame to remain undetected in the system, granting them access to additional resources and data.

In conclusion, thanks to the pro features offered by the s4e.io platform, users can effortlessly gain insights into vulnerabilities in their digital assets. With this tool, users can quickly and easily identify and mitigate security vulnerabilities in their systems, offering peace of mind and enabling them to focus on their core business objectives. By taking the necessary precautions to protect against CVE-2021-21800, users can safeguard their systems from malicious attacks and ensure smooth network operations.

 

REFERENCES

Solution Advice

To protect against this vulnerability, users should take the following precautions:

  • Always update R-SeeNet software to the latest version
  • Restrict R-SeeNet instances to trusted networks
  • Configure the firewall to limit traffic to only necessary ports
  • Implement a web application firewall (WAF) to protect against cross-site scripting attacks
  • Conduct regular vulnerability scans and penetration tests to ensure the security of the system

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.