Back to Database
Status published
Medium
CVE-2024-8877
SQL Injection
Vulnerability Description
Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8877
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- D. Blagojevic (CyberDanube)
- S. Dietz (CyberDanube)
- T. Weber (CyberDanube)
More from Riello
View All →CVE-2025-68916
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../...
Critical
9.1
CVE-2025-68915
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS...
Medium
5.5
CVE-2025-68914
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username...
Medium
6.5
CVE-2024-8878
Unauthenticated Password Reset
Critical
10
Affected Vendor
Riello
View all reports →Affected Software
Netman 204
Vulnerable Versions:
0
Timeline
Official Publish:
September 24th, 2024
Last Modified:
November 4th, 2025
Added to House:
July 22nd, 2026