QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-23843

Back to search

CVE-2024-23843

Published: Oct 28, 2024

Modified: Oct 28, 2024

PUBLISHED

CVSS v3.1

2.2

LOW

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTS(Revision 125558), from 5.0.0 LTS through 5.0.56 LTS(Revision 125560).

VendorProductVersions

Genians

Genian NAC V5.0

affected
V5.0.0 - <= V5.0.60

Genians

Genian NAC LTS V5.0

affected
5.0.0 LTS - <= 5.0.55 LTS(Revision 125558)
affected
5.0.0 LTS - <= 5.0.56 LTS(Revision 125560)

Weaknesses (CWE)

CWE-89

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now