critical9.8
CVE-2021-41063
SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbit…
Impact
SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xylem | Aanderaa Geoview | before 2.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-01
- https://www.xylem.com
- https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aanderaa-psa-2021-003.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-01
- https://www.xylem.com
- https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aanderaa-psa-2021-003.pdf