Lucene search
HistoryFeb 12, 2023 - 4:15 a.m.
CVE-2022-4557
cve-2022-4557
sql injection
group arge energy
control systems
smartpower web
vulnerability
sql command
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.001
Percentile
50.7%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.This issue affects Smartpower Web: before 23.01.01.
Affected configurations
Node
grupargesmartpowerRange<23.01.01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gruparge | smartpower | * | cpe:2.3:a:gruparge:smartpower:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Sql injection
2023-02-12 04:15:00
cvelist
cvelist
CVE-2022-4557 SQL Injection in Smartpower Web
2023-02-09 10:50:03
cve
cve
CVE-2022-4557
2023-02-12 04:15:19
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.001
Percentile
50.7%
Related for NVD:CVE-2022-4557