CVE-2020-24841

Severity

critical

Source

NVD · cve

Published

2021-02-16

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-24841

shame 35/100

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Players implicated

sdg · vendor pnpscada · product

Description

Sentiment · trusted sources

synthesis severe-fallout -0.80

Damning security failure with SQL injection in critical PNPSCADA version
cooey ↗ severe-fallout -0.90

Critical vulnerability disclosed

“PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.”
www.usatoday.com ↗ severe-fallout +0.00

Irrelevant to SDG vendor
www.cvefind.com ↗ severe-fallout +0.00

Neutral database listing
NVD ↗ severe-fallout +0.00

Irrelevant CVE ID
www.databreachtoday.com ↗ severe-fallout +0.00

Irrelevant Tenda router topic
CISA ↗ severe-fallout +0.00

Generic ICS advisory page
www.hud.gov ↗ severe-fallout +0.00

Irrelevant HUD funding list

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.