PT-2020-13165 · Microsoft+1 · Sql Server+1

Pablo Martinez + 1 · Published 2020-08-17 · Updated 2020-08-21 · CVE-2020-12606

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DB Soft SGLAC versions prior to 20.05.001

Description An issue in the SGLAC web frontend allows an attacker to execute arbitrary SQL commands on the SQL Server. This can be achieved by using the xp cmdshell stored procedure through the ProcedimientoGenerico method in the SVCManejador.svc webservice.

Recommendations For versions prior to 20.05.001, update to version 20.05.001 or later to resolve the issue. As a temporary workaround, consider restricting access to the SVCManejador.svc webservice to minimize the risk of exploitation. Avoid using the xp cmdshell stored procedure in the affected SQL Server until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-12606

Affected Products

Sglac

Sql Server

References · 3

• 🔥 https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-12606 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-12606 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12606 · Vendor Advisory