Security Advisory

CVE-2024-9925

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-15 08:41:00

Last updated 2024-10-17 11:48:53

Assigner INCIBE

CVSS score 9.8

State PUBLISHED

Description

SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint.

← Browse all CVEs View on cve.org ↗