MEDIUM🇵🇱 Wersja polska

CVE-2018-10595

CVSS 6.3v3.0pub. 2018-05-24upd. 2024-11-21

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.

CVSS Vector
CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

  • Bd Database Manager

    APP
    Bd
    3.0.1.0

  • Bd Inoqula\+

    HW
    Bd
    all versions

  • Bd Kiestra Tla

    HW
    Bd
    all versions

  • Bd Kiestra Wca

    HW
    Bd
    all versions

  • Bd Performa

    APP
    Bd
    ≤ 3.0.0.0

  • Bd Reada

    APP
    Bd
    ≤ 1.1.0.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2017-6022CRITICAL9.8PL ✓same product

Hard-coded password w BD PerformA i KLA Journal Service — dostęp do bazy BD Kiestra

CVE-2018-10593MEDIUM5.6same product

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an...

CVE-2019-10959CRITICAL10.0PL ✓same vendor

BD Alaris Gateway Workstation — upload złośliwego firmware bez ograniczeń

CVE-2018-14786CRITICAL9.4PL ✓same vendor

Auth Bypass w pompach strzykawkowych BD Alaris — nieautoryzowany zdalny dostęp

CVE-2023-30563HIGH8.2same vendor

A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.