CVE-2023-33366 - A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands

Back Back to CVE browser

HIGH

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands

Published Aug 3, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.60%

Description

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://claroty.com/team82/disclosure-dashboard/cve-2023-33366
Third Party Advisory
https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291
Release Notes

Link	Providers	Tags
https://claroty.com/team82/disclosure-dashboard/cve-2023-33366		Third Party Advisory
https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291		Release Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 3, 2023

Updated Oct 17, 2024

Reserved May 22, 2023

Link CVE-2023-33366

CISA Vulnrichment

Updated Oct 17, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-33366

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-33366