CVE-2025-8703

Name of the Vulnerable Software and Affected Versions Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0

Description A critical vulnerability exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0, specifically within the Environmental Real-Time Data Module. The vulnerability is a SQL injection, triggered by manipulating the energyId argument in the /WEAS HomePage/GetAreaTrendChartData API endpoint. This allows for remote attacks. The exploit for this issue has been publicly disclosed.

Recommendations As a temporary workaround, restrict access to the /WEAS HomePage/GetAreaTrendChartData API endpoint. Sanitize the energyId argument to prevent SQL injection.