CVEvulnerability
CVE-2023-1863
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-04-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.
This issue affects Water Metering Software: before 23.04.06.
Affected configurations
• eskom el terminali \(su okuma\) uygulamalarimiz (< 23.04.06)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0225 siberguvenlik.gov.tr
- https://www.usom.gov.tr/bildirim/tr-23-0225 Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-23-0225 Third Party Advisory