SQL Injection Vulnerability in Megatek Communication System's Azora Wireless Network Management
CVE-2024-12913

8.8HIGH

Key Information:

Vendor

Megatek Communication System

Status
Azora Wireless Network Management
Vendor
CVE Published:
16 September 2025

What is CVE-2024-12913?

An SQL Injection vulnerability exists in the Megatek Communication System's Azora Wireless Network Management. This vulnerability allows an attacker to manipulate SQL queries via improperly sanitized input, potentially compromising database integrity and confidentiality. The issue has been identified through version 20250916, and users are advised to ensure their systems are updated following resolution announcements from the vendor.

Affected Version(s)

Azora Wireless Network Management 0 <= 20250916

References

https://www.usom.gov.tr/bildirim/tr-25-0253

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cihan Mehmet DOÄžAN
Berk IMRAN
Kaan ATMACA
Secure Future Bilgi Teknolojileri
.
CVE-2024-12913 : SQL Injection Vulnerability in Megatek Communication System's Azora Wireless Network Management