CVE-2021-21910

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.15

Description A privilege escalation issue exists due to insufficient access restrictions to the C:R-SeeNet directory. This can be exploited by an attacker using a specially crafted malicious file to elevate privileges to NT SYSTEM authority.

Recommendations For Advantech R-SeeNet version 2.4.15, consider restricting access to the C:R-SeeNet directory to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable directory for executing files from untrusted sources.