Lucene search

TR-CERTVULNRICHMENT:CVE-2024-7076

HistorySep 04, 2024 - 2:13 p.m.

CVE-2024-7076 SQLi in Semtek Informatics Software's Semtek Sempos

2024-09-0414:13:50

CWE-89

TR-CERT

github.com

cve-2024-7076

sql injection

semtek sempos

vulnerability

semtek informatics software

CVSS4

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:N/SA:N/AU:Y/R:U/V:C/RE:L

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

39.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection.This issue affects Semtek Sempos: through 31072024.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:semtek:sempos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "semtek",
    "product": "sempos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "31072024"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.usom.gov.tr/bildirim/tr-24-1396

CVSS4

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:N/SA:N/AU:Y/R:U/V:C/RE:L

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

39.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-7076