CVE-2022-3386

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet versions 2.4.17 and prior

Description The issue is related to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer, enabling remote code execution. This allows a remote attacker to execute arbitrary code.

Recommendations For versions 2.4.17 and prior, update to a version later than 2.4.17 to resolve the issue. As a temporary workaround, consider restricting the use of filenames to prevent overflow of the stack buffer until a patch is available.