ARDEREG Sistemas SCADA SQL Injection
Vulnerability Description
ARDEREG Sistema SCADA Central versions 2.203 and prior login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4485
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Momen Eldawakhly of Samurai Digital Security Ltd. reported this vulnerability to CISA.
Affected Vendor
ARDEREG
View all reports →