by Kastro
Paper/Archive/CVE-2024-6743

CVE-2024-6743

AguardNet Space Management System — AguardNet Space Management System - SQL injection

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.3.523 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Affected

ProductAffectedFixed inSource
Space Management Systemall – < 2024-04-09-33022024-04-09-3302CNA
space_management_system< 2024-04-09-33022024-04-09-3302CISA-ADP

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-7932-a6d4d-1.htmlwriteuptwcert.org.tw/en/cp-139-7933-9a38d-2.html