SQL Injection Vulnerability in Camstar Enterprise Platform and Opcenter Execution Core by Siemens
CVE-2020-7577

8.1HIGH

What is CVE-2020-7577?

A vulnerability has been discovered in the Siemens Camstar Enterprise Platform and Opcenter Execution Core that allows authenticated users to exploit SQL Injection. By manipulating specific application fields, attackers can inject modified SQL queries to the back-end server. This could lead to unauthorized access to sensitive application data, allowing the attacker to read and potentially alter data within their reach. Organizations using affected versions are advised to review security measures to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Camstar Enterprise Platform All versions

Opcenter Execution Core All versions < V8.2

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.