CVE-2023-1064CWE-89

SQLi in Uzay Baskul's Weighbridge Automation Software

Critical · published March 1, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

🔥 A crafty SQL injection is hidden in the Uzay Baskul Weighbridge Automation Software, and it could spell disaster for your data security! Think of this vulnerability as a restaurant kitchen where unauthorized staff can slip in and make changes to orders without anyone checking their credentials. A sneaky chef could replace the ingredients, leading to a disastrous dining experience! An attacker could exploit this flaw to manipulate SQL commands, potentially allowing them to access, alter, or even delete your entire database. This could lead to unauthorized data exposure or destruction, which would be absolutely devastating for any organization relying on this software.

Put simply

Think of this vulnerability as a restaurant kitchen where unauthorized staff can slip in and make changes to orders without anyone checking their credentials. A sneaky chef could replace the ingredients, leading to a disastrous dining experience! This SQL injection vulnerability allows attackers to insert malicious SQL code into queries executed by the Weighbridge Automation Software, bypassing normal data access controls and potentially taking over the database.

What to do

An attacker could exploit this flaw to manipulate SQL commands, potentially allowing them to access, alter, or even delete your entire database. This could lead to unauthorized data exposure or destruction, which would be absolutely devastating for any organization relying on this software. Upgrade to version 1.1 or later immediately to patch this critical vulnerability. Additionally, implement input validation and parameterized queries to prevent future SQL injection attempts. Regular security audits could help identify any lingering risks. This is fixable! Follow these steps, and you’ll be well on your way to securing your systems. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2023-03-01T12:51Z
EPSS history
Timeline
  • 01 MAR 12:51Z
    SQLi in Uzay Baskul's Weighbridge Automation Software
    cvelistv5