PT-2023-17292 · Eskom · Eskom Water Metering

CVE-2023-1863 · Publicado 2023-04-14 · Atualizado 2026-05-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eskom Water Metering Software versions prior to 23.04.06

Description The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection. This is due to the improper neutralization of special elements used in an SQL command.

Recommendations For versions prior to 23.04.06, update to version 23.04.06 or later to resolve the issue. As a temporary workaround, consider restricting access to the SQL command interface to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-1863

Produtos afetados

Eskom Water Metering

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-1863 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1863 · Aviso do Fabricante
• https://usom.gov.tr/bildirim/tr-23-0225 · Nota
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0225 · Nota
• https://t.me/cvenotify/57617 · Publicação no Telegram
• https://t.me/cveNotify/164547 · Publicação no Telegram