← volver
CVE-2024-52057

Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files

CVSS 9.1 CRITICALEPSS 0.4%CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0.*, from 5.2.0 before 5.3.*.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
RTI · Connext Professional

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →