You are here

Advantech R-SeeNet (ICSA-20-289-02) – Product Used in the Water and Wastewater and Energy Sectors

Advantech R-SeeNet (ICSA-20-289-02) – Product Used in the Water and Wastewater and Energy Sectors

Created: Thursday, October 15, 2020 - 13:45
Categories:
Cybersecurity

CISA has published an advisory on an SQL injection vulnerability in Advantech R-SeeNet. Versions 1.5.1 through 2.4.10 are affected. Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the R-SeeNet database. Advantech recommends updating to Version 2.4.11 or later. CISA also recommends a series of measures to mitigate the vulnerability. Read the advisory at CISA.