SQL Injection in Smartpower Web
CVE-2022-45089

8.8HIGH

Key Information:

Vendor: Group Arge Energy And Control Systems
Status: Smartpower Web
Vendor: CVE Published:; 12 February 2023

🔔 Create Group Arge Energy And Control Systems Vulnerability Alert

What is CVE-2022-45089?

A vulnerability exists in Smartpower Web developed by Group Arge Energy and Control Systems due to improper input validation. This issue allows for SQL Injection, which could enable attackers to manipulate database queries, potentially leading to unauthorized data access or modification. The vulnerability affects versions of Smartpower Web prior to 23.01.01. Address this issue promptly to secure your systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Smartpower Web 0 < 23.01.01

References

https://www.usom.gov.tr/bildirim/tr-23-0066

government-resource

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 12, 2023
Vulnerability Reserved
Nov 9, 2022

Credit

Furkan KUTLUCA

JSON

Group Arge Energy And Control Systems

What is CVE-2022-45089?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Credit

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.