Back to Database
Status published
Low
CVE-2024-23843
Improper Neutralization of Special Elements used in an SQL Command...
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTS(Revision 125558), from 5.0.0 LTS through 5.0.56 LTS(Revision 125560).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23843
Credits & Attribution
No credits recorded in the NVD database.
More from Genians
View All →CVE-2023-40254
Download of Code Without Integrity Check vulnerability in Genians Genian...
High
7.5
CVE-2023-40253
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian...
Medium
6
CVE-2023-40252
Improper Control of Generation of Code ('Code Injection') vulnerability in...
Medium
6
CVE-2023-40251
Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC...
Medium
5.2
Affected Vendor
Genians
View all reports →Affected Software
Genian NAC V5.0, Genian NAC LTS V5.0
Vulnerable Versions:
V5.0.0, 5.0.0 LTS
Timeline
Official Publish:
October 28th, 2024
Last Modified:
October 28th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N