CVE-2024-14025CWE-89

Video Station

Low · published March 11, 2026

CVSS v4.0
0.1
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following version:

Video Station 5.8.2 and later

The record
Technical detail
CVSS v4.0
0.1 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:U
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-03-11T08:02Z
EPSS history
Timeline
  • 11 MAR 08:02Z
    Video Station
    cvelistv5