PT-2024-37806 · Mikafon · Mikafon Ma7

Ömer Kepenek · Published 2024-07-30 · Updated 2026-06-05 · CVE-2024-6699

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mikafon MA7 versions 3.0 through 3.0

Description The issue is related to an SQL Injection vulnerability, which is caused by the improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially impacting unknown functionality. There is a risk of remote attack.

Recommendations For Mikafon MA7 versions 3.0 through 3.0, upgrade the affected component immediately to mitigate the risk of remote attack. As a temporary workaround, consider restricting access to sensitive database components until the issue is resolved.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-6699

Affected Products

Mikafon Ma7

References · 8

• https://osv.dev/vulnerability/CVE-2024-6699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6699 · Security Note
• https://t.me/cvenotify/91881 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1105 · Note
• https://t.me/cveNotify/166177 · Telegram Post
• https://t.me/cvedetector/2035 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0322 · Note
• https://twitter.com/oktsec/status/1822833925095363069 · Twitter Post