← Database

CVE-2024-8997

CRITICAL CVSS: 9.8 Published: 2025-03-18 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection. This issue affects EVC04 Configuration Interface: before V3.187, V4.53.

Affected Platforms

Vestel Evc04 Configuration Interface

Weakness Type

CWE-89

References