CVE-2023-2851
SQLi in Ceppatron
- State
- Published
- Severity
- 9.8 Critical
- Published
- May 25, 2023
- Updated
- May 22, 2026
- Reserved
- May 23, 2023
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection.
This issue affects all versions of the sofware also EOS when CVE-ID assigned.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products
| Product | Versions |
|---|---|
CeppatronAGT Tech |
|
References
- https://www.usom.gov.tr/bildirim/tr-23-0294government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0294government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.