medium6.5
CVE-2015-1008
SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input.
Impact
SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Ams Device Manager | through 12.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://community.emerson.com/process/emerson-exchange/operateandmanage/deltav/deltav_security/b/securitynotificationblog/archive/2015/04/16/dsn15003-2-ams-device-management-sql-injection-vulnerability
- http://www.securityfocus.com/bid/74774
- https://ics-cert.us-cert.gov/advisories/ICSA-15-111-01
- http://community.emerson.com/process/emerson-exchange/operateandmanage/deltav/deltav_security/b/securitynotificationblog/archive/2015/04/16/dsn15003-2-ams-device-management-sql-injection-vulnerability
- http://www.securityfocus.com/bid/74774
- https://ics-cert.us-cert.gov/advisories/ICSA-15-111-01