CVE-2023-33366

2023-08-0300:00:00

mitre

www.cve.org

suprema biostar 2

sql injection

vulnerability

authenticated users

arbitrary sql commands

cve-2023-33366

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

References

claroty.com/team82/disclosure-dashboard/cve-2023-33366

kb.supremainc.com/knowledge/doku.php?id=en:release_note_291