SQL Injection in Smartpower Web
CVE-2022-4557

9.8CRITICAL

Key Information:

Vendor: Group Arge Energy And Control Systems
Status: Smartpower Web
Vendor: CVE Published:; 9 February 2023

🔔 Create Group Arge Energy And Control Systems Vulnerability Alert

What is CVE-2022-4557?

An SQL Injection vulnerability in Smartpower Web developed by Group Arge Energy and Control Systems allows attackers to manipulate SQL queries by inserting malicious code. This could lead to unauthorized access to sensitive data, compromise system integrity, and result in broader impacts on database security. The issue is present in versions released before 23.01.01, highlighting the need for immediate remediation to safeguard against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Smartpower Web 0 < 23.01.01

References

https://www.usom.gov.tr/bildirim/tr-23-0066

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 9, 2023
Vulnerability Reserved
Dec 16, 2022

JSON

Group Arge Energy And Control Systems

What is CVE-2022-4557?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.