CVE-2024-0851

2024-05-2715:15:08

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

grup arge

smartpower

v24.05.27

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection.This issue affects Smartpower: through V24.05.27.

References

www.usom.gov.tr/bildirim/tr-24-0556