Sql injection

2023-09-2107:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

frauscher sensortechnik

fds101

v1.4.24

web interface

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information.

CPENameOperatorVersion
frauscher_diagnostic_system_101le1.4.24
frauscher_diagnostic_system_101le1.4.24

CPE	Name	Operator	Version
	frauscher_diagnostic_system_101	le	1.4.24
	frauscher_diagnostic_system_101	le	1.4.24

References

cert.vde.com/en/advisories/VDE-2023-038