CVE-2017-11494

Опубликовано: 02 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.

Ссылки

http://www.securityfocus.com/archive/1/540946/100/0/threaded
http://www.securityfocus.com/bid/100067
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42408/
http://www.securityfocus.com/archive/1/540946/100/0/threaded
http://www.securityfocus.com/bid/100067
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42408/

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sol-connect:sol.connect_iset-mpp_meter_firmware:1.2.4.2:*:*:*:*:*:*:*

cpe:2.3:h:sol-connect:sol.connect_iset-mpp_meter:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02774

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-cmmh-vgv7-57gw