CVE-2023-3000

CriticalCVSS 9.8

Published: 02/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

51th percentile - higher than 51% of all known CVEs

Summary

CVE-2023-3000 describes an improper neutralization of special elements used in SQL commands in Erikoglu Technology's ErMon, allowing command line execution through SQL Injection and authentication bypass.

Risk Assessment

This vulnerability may lead to unauthorized access to the system and execution of harmful commands, posing a serious risk to the organization's data security.

Recommendation

It is recommended to update ErMon to version 230602 or later to mitigate this vulnerability and implement additional security measures against SQL Injection.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.