← volver
CVE-2023-4485

ARDEREG Sistemas SCADA SQL Injection

CVSS 9.8 CRITICALEPSS 0.6%CWE-89
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 0.6%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
05 sep 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
ARDEREG ​Sistema SCADA Central versions 2.203 and prior login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
ARDEREG · Sistemas SCADA