Lucene search

TR-CERTVULNRICHMENT:CVE-2024-7078

HistorySep 04, 2024 - 2:36 p.m.

CVE-2024-7078 Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos

2024-09-0414:36:32

CWE-89

TR-CERT

github.com

cve-2024-7078

semtek informatics software

sql injection

CVSS4

9.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:N/VA:N/SA:N

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

39.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection.This issue affects Semtek Sempos: through 31072024.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:semtek:sempos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "semtek",
    "product": "sempos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "31072024"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.usom.gov.tr/bildirim/tr-24-1396

CVSS4

9.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:N/VA:N/SA:N

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

39.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-7078