PT-2022-16538 · Unknown · Tongda2000
CVE-2022-24206
·
Published
2022-02-14
·
Updated
2023-12-16
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tongda2000 version 11.10
Description
A SQL injection issue was found in the /mobile seal/get seal.php endpoint via the
DEVICE LIST parameter. This allows for potential exploitation of the software.Recommendations
For Tongda2000 version 11.10, consider restricting access to the /mobile seal/get seal.php endpoint or limiting the use of the
DEVICE LIST parameter until a fix is available.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tongda2000