CVE-2024-8950

SQLi in Arne Informatics' Piramit Automation

CVSS 9.9 CRITICALEPSS 0.6%CWE-89

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.9EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Dec 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Arne Informatics · Piramit Automation

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1898 https://www.usom.gov.tr/bildirim/tr-24-1898