Beveiligingsadvies

CVE-2024-7731

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-14 06:30:58
Laatst bijgewerkt 2024-08-14 13:23:19
Toegewezen door twcert
CVSS-score 9.8
Status PUBLISHED

Beschrijving

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.