PT-2025-27242 · Mobilteg Mobile Informatics · Mikro Hand Terminal

Hüseyin Üzüm · Published 2025-06-27 · Updated 2025-09-23 · CVE-2024-12143

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB (affected versions not specified)

Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows attackers to manipulate data. The vendor's response regarding the fixing process is pending, and an update is expected when new information becomes available.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-12143

Affected Products

Mikro Hand Terminal

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12143 · Security Note
• https://twitter.com/CveFindCom/status/1938653658729644371 · Twitter Post
• https://twitter.com/CVEnew/status/1938671236584018221 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0142 · Note
• https://t.me/cvetracker/27257 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0142 · Note
• https://t.me/cveNotify/136114 · Telegram Post