PT-2017-12669 · Opw Fuel Management Systems · Sitesentinel Isite Atg+2
Emen Rozhkov
·
Published
2017-09-09
·
Updated
2019-10-09
·
CVE-2017-12731
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OPW Fuel Management Systems SiteSentinel Integra 100 versions older than V175
OPW Fuel Management Systems SiteSentinel Integra 100 versions V175 through V189
OPW Fuel Management Systems SiteSentinel Integra 100 versions V191 through V195
OPW Fuel Management Systems SiteSentinel Integra 500 versions older than V175
OPW Fuel Management Systems SiteSentinel Integra 500 versions V175 through V189
OPW Fuel Management Systems SiteSentinel Integra 500 versions V191 through V195
OPW Fuel Management Systems SiteSentinel iSite ATG versions older than V175
OPW Fuel Management Systems SiteSentinel iSite ATG versions V175 through V189
OPW Fuel Management Systems SiteSentinel iSite ATG versions V191 through V195
OPW Fuel Management Systems SiteSentinel iSite ATG version V16Q3.1
Description
A SQL Injection issue was discovered in the mentioned OPW Fuel Management Systems consoles. The application is vulnerable to injection of malicious SQL queries via the input from the client.
Recommendations
For versions older than V175, update to a version newer than V175.
For versions V175 through V189, update to a version newer than V189.
For versions V191 through V195, update to a version newer than V195.
For version V16Q3.1, update to a version newer than V16Q3.1.
As a temporary workaround, consider validating and sanitizing all client input to prevent malicious SQL queries.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sitesentinel Integra 100
Sitesentinel Integra 500
Sitesentinel Isite Atg