CVE-2023-2851

Critical

Published: 25/05/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-2851 describes an improper neutralization of special elements used in SQL commands, allowing command line execution through SQL Injection. This issue affects all versions of AGT Tech Ceppatron software.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and execution of arbitrary commands, posing a serious security threat to the organization.

Recommendation

It is recommended to immediately update AGT Tech Ceppatron software to the latest version to mitigate this vulnerability and implement additional protections against SQL Injection.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned.