by Kastro
Paper/Archive/CVE-2023-3000

CVE-2023-3000

Erikoglu Technology ErMon — SQLi in Erikoglu Technology's ErMon

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.4.564 × 2011.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.

Affected

ProductAffectedFixed inSource
ErMon< 230602230602CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-23-0315refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0315