by Kastro
Paper/Archive/CVE-2021-3958

CVE-2021-3958

Ipack Automation Systems Ipack SCADA Software — SQL Injection Vulnerability in Ipack SCADA Software

EPSS 15%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.6.966 × 2019.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.

Affected

ProductAffectedFixed inSource
Ipack SCADA Softwareunspecified – < 1.1.01.1.0CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

exploitgithub.com/paradessia/cve/blob/main/Ipack-Scada-Automation.txt