SQL Injection Vulnerability in H3C SeaSQL DWS V2.0
CVE-2024-33335

Currently unrated

Key Information:

Vendor
H3C
Status
SeaSQL DWS
Vendor
CVE Published:
20 June 2024

Summary

An SQL Injection vulnerability in H3C's SeaSQL DWS V2.0 allows remote attackers to execute arbitrary code by sending specially crafted data. By exploiting this flaw, attackers could manipulate database queries, potentially leading to unauthorized access, data leakage, and system compromise. Organizations utilizing this product should prioritize mitigating this risk by applying available security patches and following best practices for database security.

References

https://www.h3c.com/cn/
https://gist.github.com/vrhappy/08cb4c8721eed8a74fe786ecd...
https://www.h3c.com/cn/Service/Online_Help/psirt/

Timeline

  • Vulnerability published

.