SQL Injection Vulnerability in Camstar Enterprise Platform and Opcenter Execution Core by Siemens

CVE-2020-7577

Summary

A vulnerability has been discovered in the Siemens Camstar Enterprise Platform and Opcenter Execution Core that allows authenticated users to exploit SQL Injection. By manipulating specific application fields, attackers can inject modified SQL queries to the back-end server. This could lead to unauthorized access to sensitive application data, allowing the attacker to read and potentially alter data within their reach. Organizations using affected versions are advised to review security measures to mitigate the risk of exploitation.

References