by Kastro
Paper/Archive/CVE-2024-8950

CVE-2024-8950

Arne Informatics Piramit Automation — SQLi in Arne Informatics' Piramit Automation

EPSS 0.6%CVSS 9.9
critical.is priorityof 100
40
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 49.2.492 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024.

Affected

ProductAffectedFixed inSource
Piramit Automation< 27.09.202427.09.2024CNA

Scores by source

TR-CERT (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-1898refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1898