CVE-2022-3387

medium · 6.5

Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files.

6.5

CVSS

14.0%

EPSS (exploit prob.)

96th

EPSS percentile

2022-10-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
advantech	r-seenet	<= 2.4.19

Check a specific version with /api/v1/cve/match.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-3387