CVE-2024-7201 — CRITICAL (9.8)

Q: How severe is CVE-2024-7201?

CVE-2024-7201 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2024-7201?

Check the references section above for vendor advisories and patch information. Affected products include: Simopro Technology Winmatrix3.

Vulnerability Description

The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Simopro Technology	Winmatrix3	<= 1.2.33.3

Related Weaknesses (CWE)

CWE-89

References

https://www.twcert.org.tw/en/cp-139-7961-c575f-2.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-7960-0ee18-1.htmlThird Party Advisory
https://www.twcert.org.tw/en/cp-139-7961-c575f-2.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-7960-0ee18-1.htmlThird Party Advisory

FAQ

What is CVE-2024-7201?

CVE-2024-7201 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and d...

How severe is CVE-2024-7201?

CVE-2024-7201 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-7201?

Check the references section above for vendor advisories and patch information. Affected products include: Simopro Technology Winmatrix3.