Paper/Archive/CVE-2020-13499

CVE-2020-13499

talos — An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

EPSS 3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 87.0.870 × 2017.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

Affected

ProductAffectedFixed inSource

AvevaAveva eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

talos (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2020-1106 refus-cert.cisa.gov/ics/advisories/icsa-20-254-01