by Kastro
Paper/Archive/CVE-2023-3717

CVE-2023-3717

Farmakom Remote Administration Console — SQLi in Farmakoms Remote Administration Console

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.8.498 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farmakom Remote Administration Console allows SQL Injection. This issue affects Remote Administration Console: before 1.02.

Affected

ProductAffectedFixed inSource
Remote Administration Console< 1.021.02CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-23-0441refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0441