CVE-2017-11494 SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.
CriticalCVSS 9.8
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sol-connect sol.connect iset-mpp meter firmware | = 1.2.4.2 | No fix listed |
References
- 20170801 [CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL Injection Vulnerability mailing-list
- 100067 third-party-advisory vdb-entry
- 42408 exploit