CVE-2023-1863

Critical

Published: 14/04/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-1863 describes an improper neutralization of special elements used in SQL commands, allowing command line execution through SQL Injection in Eskom Water Metering Software. This issue affects versions prior to 23.04.06.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized commands on the server, potentially leading to serious data and system security breaches. Organizations using this software are at risk of losing control over their systems.

Recommendation

It is recommended to update the software to version 23.04.06 or later to mitigate this vulnerability. Additionally, conducting a security audit to identify and secure other potential vulnerabilities is advisable.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06.