SQL Injection Vulnerability in Security Center by Genetec
CVE-2025-2928
7.2HIGH
What is CVE-2025-2928?
A SQL Injection vulnerability affects the Archiver role within Genetec's Security Center. This flaw allows attackers to manipulate SQL queries through possibly unsafe inputs, which could lead to unauthorized data access or extraction. Prompt action is crucial to mitigate potential security threats arising from this weakness, as it compromises the integrity and confidentiality of the system.
Affected Version(s)
Genetec Security Center Windows >=5.9.0.0 <5.9.5.9 < 5.9.0.0 5.9.5.9
Genetec Security Center Windows >=5.10.0.0 <5.10.4.28 < 5.10.0.0 5.10.4.28
Genetec Security Center Windows >=5.11.0.0 <5.11.3.19 < 5.11.0.0 5.11.3.19
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
CVSS V3.0
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved