CVE-2025-8702

Name of the Vulnerable Software and Affected Versions Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0

Description A critical issue exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0, specifically within the Historical Data Query Module. The vulnerability is a SQL injection, triggered by manipulating the ObjectID argument in the /CommonSolution/GetVariableByOneIDNew file. This allows for remote exploitation. The exploit details have been publicly disclosed.

Recommendations As a temporary workaround, consider restricting access to the /CommonSolution/GetVariableByOneIDNew file to minimize the risk of exploitation. Sanitize the ObjectID argument to prevent SQL injection attacks.