CVE-2024-6743

AguardNet Space Management System - SQL injection

CVSS 9.8 CRITICALEPSS 0.7%CWE-89

Vexday Risk Score

28Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 9.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 jul 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

AguardNet · Space Management System

Referências

https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html