ГлавнаяУязвимости → CVE-2024-1839
10критическая

CVE-2024-1839

Описание

Intrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL injection, which may allow an unauthenticated remote attacker to execute malicious code, exfiltrate data, or manipulate the database.

Затрагиваемое ПО
Intrado 911 emergency gateway firmwareIntrado 911 emergency gateway
CVSS
Балл10 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Источники
https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-04https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-04