critical9.8
CVE-2024-8997
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection.
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection. This issue affects EVC04 Configuration Interface: before V3.187, V4.53.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vestel | Evc04 Configuration Interface | through 18.03.2025 |