⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-2351

HIGH · 7.5 CVSS Gepubliceerd: 20-05-2014 CWE-89

Beschrijving

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.

Vendors

Controlsystemworks

Affected products

Csworks

References

www.controlsystemworks.com
www.securityfocus.com
www.cisa.gov
ics-cert.us-cert.gov