CVE-2021-3958

SQL Injection Vulnerability in Ipack SCADA Software

CVSS 9.8 CRITICALEPSS 14.5%CWE-89

Vexday Risk Score

53Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 14.5%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

16 Nov 2021Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Ipack Automation Systems · Ipack SCADA Software

public PoCs found — 1

cve_referencegithub.com/paradessia/cve/blob/main/Ipack-Scada-Automation.txtunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/paradessia/cve/blob/main/Ipack-Scada-Automation.txt