SQL Injection in Smartpower Web
CVE-2022-45090

8.8HIGH

Key Information:

Vendor: Group Arge Energy And Control Systems
Status: Smartpower Web
Vendor: CVE Published:; 12 February 2023

🔔 Create Group Arge Energy And Control Systems Vulnerability Alert

What is CVE-2022-45090?

A vulnerability has been identified in Smartpower Web by Group Arge Energy and Control Systems that allows for SQL Injection due to improper input validation. This weakness can be exploited before version 23.01.01, leading to unauthorized database access and potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Smartpower Web 0 < 23.01.01

References

https://www.usom.gov.tr/bildirim/tr-23-0066

government-resource

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 12, 2023
Vulnerability Reserved
Nov 9, 2022

Credit

Furkan KUTLUCA

JSON

Group Arge Energy And Control Systems

What is CVE-2022-45090?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Credit

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.