CVE-2023-4485

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

RDEREG Sistema SCADA Central versions 2.203 and prior login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.

References

Link	Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01	Third Party Advisory US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:a:ardereg:sistemas_scada:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:35

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01 - Third Party Advisory, US Government Resource~~	() https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01 - Third Party Advisory, US Government Resource

Information

Published : 2023-09-06 00:15

Updated : 2024-11-21 08:35

NVD link : CVE-2023-4485

Mitre link : CVE-2023-4485

CVE.ORG link : CVE-2023-4485

JSON object : View

Products Affected

sistemas_scada

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2023-4485", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-09-06T00:15:07.530", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "[email protected]"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-89"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "ARDEREG\u00a0\u200bSistema SCADA Central versions 2.203 and prior\nlogin page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.\n\n"}, {"lang": "es", "value": "ARDEREG ?Sistema SCADA Central versiones 2.203 y anteriores, la p\u00e1gina de inicio de sesi\u00f3n son vulnerables a un ataque de inyecci\u00f3n blind SQL no autenticada. Un atacante podr\u00eda manipular la l\u00f3gica de consulta SQL de la aplicaci\u00f3n para extraer informaci\u00f3n confidencial o realizar acciones no autorizadas dentro de la base de datos. En este caso, la vulnerabilidad podr\u00eda permitir a un atacante ejecutar consultas SQL arbitrarias a trav\u00e9s de la p\u00e1gina de inicio de sesi\u00f3n, lo que podr\u00eda provocar acceso no autorizado, fuga de datos o incluso interrupci\u00f3n de procesos industriales cr\u00edticos.\n"}], "lastModified": "2024-11-21T08:35:15.847", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ardereg:sistemas_scada:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C51DD5B5-A3FA-482B-819F-100F193CEB96", "versionEndIncluding": "2.203"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}