CVE-2020-25157
CVE-2020-25157
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information.
Affected products
n/a · Advantech R-SeeNetWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →