CVE-2024-7801

MEDIUM

6.5

Beschreibung

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

CVE Details

CVSS v3.1 Bewertung6.5

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorADJACENT_NETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/4/2024

Zuletzt geandert10/17/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

microchip:timeprovider_4100microchip:timeprovider_4100_firmware

Schwachen (CWE)

CWE-89CWE-89

Referenzen

https://www.gruppotim.it/it/footer/red-team.html(dc3f6da9-85b5-4a73-84a2-2ec90b40fca5)

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-unathenticated-sql-injection(dc3f6da9-85b5-4a73-84a2-2ec90b40fca5)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.