Vulnerability Description
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Orpak | Siteomat | < 6.4.414.084 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/108167Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01Third Party AdvisoryUS Government Resource
- https://www.orpak.comVendor Advisory
- http://www.securityfocus.com/bid/108167Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01Third Party AdvisoryUS Government Resource
- https://www.orpak.comVendor Advisory
FAQ
What is CVE-2017-14851?
CVE-2017-14851 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT...
How severe is CVE-2017-14851?
CVE-2017-14851 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-14851?
Check the references section above for vendor advisories and patch information. Affected products include: Orpak Siteomat.