Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-40967
HistoryOct 27, 2022 - 9:15 p.m.

Sql injection

2022-10-2721:15:00
PRIOn knowledge base
www.prio-n.com
2
diaenergie
sql injection
checkiothubnameexisted
low-privileged authenticated attacker
arbitrary sql queries
vulnerability
nvd

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

CPENameOperatorVersion
diaenergielt1.9.01.002

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

Related for PRION:CVE-2022-40967