CVE-2024-8329

Gether Technology 6SHR System - SQL Injection

CVSS 8.8 HIGHEPSS 0.6%CWE-89

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 ago 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL command to read, modify, and delete database contents.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Gether Technology · 6SHR System

Referências

https://www.twcert.org.tw/en/cp-139-8034-657b7-2.html https://www.twcert.org.tw/tw/cp-132-8030-e2eac-1.html