← Database

CVE-2022-39056

CRITICAL CVSS: 9.8 Published: 2022-10-18 Modified: 2026-06-17

Description

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.

Affected Platforms

Changingtec Rava Certificate Validation System

Weakness Type

CWE-89, CWE-89

References