CVE-2017-11494

Critical

Published: 02/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in SOL.Connect ISET-mpp meter version 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.

Risk Assessment

Attackers may gain access to sensitive data or manipulate the database, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update the software to the latest version to eliminate this vulnerability and implement additional security measures such as input validation.

Original NVD description (English source)

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.