CVE-2017-6050

Опубликовано: 21 июн. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.

Ссылки

http://www.securityfocus.com/bid/99164
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01
Third Party Advisory
US Government Resource
https://www.tenable.com/security/research/tra-2017-24
http://www.securityfocus.com/bid/99164
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01
Third Party Advisory
US Government Resource
https://www.tenable.com/security/research/tra-2017-24

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*

Версия до 5.2.1231.0 (включая)

EPSS

Процентиль: 79%

0.01273

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-cpvc-93p9-v723