CVE-2024-6743 - AguardNet Space Management System

Back Back to CVE browser

CRITICAL

AguardNet Space Management System - SQL injection

Published Jul 15, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.68%

Description

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Affected products

Vendor AguardNet Product Space Management System Default
unaffected
- Version
  all
  Status
  affected
  Constraints
  <2024-04-09-3302

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

AguardNet

Space Management System

unaffected

Version	Status	Constraints
all	affected	<2024-04-09-3302

Vendor Aguardnet Product Space Management System Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <2024-04-09-3302

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Aguardnet

Space Management System

n/a

Version	Status	Constraints
0	affected	<2024-04-09-3302

Remediation

Vendor solution

Update to 2024-04-09-3302 or later version.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47780
Advisory
https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html
third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47780		Advisory
https://www.twcert.org.tw/en/cp-139-7933-9a38d-2.html		third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-7932-a6d4d-1.html		third-party-advisoryThird Party Advisory