CVE-2021-23230

MEDIUM Year: 2021
CVSS v3 Score
4.3
Medium
CVSS v2 Score
3.5
Low
Weakness Type
CWE-89
View all →

Vulnerability Description

A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.

Related Vulnerabilities

CVE-2015-7784

MEDIUM
CVSS:4.3(Medium)

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitra...

CWE-892015

CVE-2017-12302

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL ...

CWE-892017

CVE-2017-15546

MEDIUM
CVSS:4.3(Medium)

The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerabi...

CWE-892017

CVE-2018-0120

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerabil...

CWE-892018

CVE-2018-11065

MEDIUM
CVSS:4.3(Medium)

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could p...

CWE-892018

CVE-2018-14623

MEDIUM
CVSS:4.3(Medium)

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal I...

CWE-892018