Vulnerability · Published Nov 16, 2021 · Assigned by TR-CERT
CVE-2021-3958SQL Injection Vulnerability in Ipack SCADA Software
Critical 9.8
In plain English
A critical-severity SQL injection in Ipack SCADA Software from Ipack Automation Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 14.5% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)14.5%top 3.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ipack Automation Systems | Ipack SCADA Software | unspecified – before 1.1.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H