Exploit
CVE-2024-9560

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Published: Oct 6, 2024 / Updated: 44d ago

010
CVSS 5.3EPSS 0.05%Medium
CVE info copied to clipboard

Summary

A critical vulnerability has been identified in ESAFENET CDG V5, specifically in the delCatelogs function of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. This vulnerability allows for SQL injection attacks through the manipulation of the 'id' argument. The attack can be launched remotely and requires low privileges and no user interaction.

Impact

This SQL injection vulnerability can have severe consequences. Attackers can potentially: 1. Access, modify, or delete sensitive data in the database. 2. Execute administrative operations on the database. 3. Issue commands to the operating system. 4. In some cases, read or write local files on the server. The CVSS v3.1 base score of 8.8 (Critical) indicates high impact on confidentiality, integrity, and availability of the system. This means attackers could potentially steal sensitive information, alter important data, or disrupt service availability.

Exploitation

One proof-of-concept exploit is available on flowus.cn. There is no evidence of proof of exploitation at the moment.

Patch

As of the latest information provided, there is no mention of an available patch for this vulnerability. The security team should monitor for updates from ESAFENET regarding a security patch for CDG V5.

Mitigation

Until a patch is available, consider the following mitigation strategies: 1. Implement strong input validation and sanitization for the 'id' parameter in the affected function. 2. Use prepared statements or parameterized queries to prevent SQL injection. 3. Apply the principle of least privilege to database accounts used by the application. 4. Consider implementing a Web Application Firewall (WAF) to filter out malicious requests. 5. Monitor and log database activities to detect potential exploitation attempts. 6. If possible, temporarily disable or restrict access to the vulnerable function until a patch is available. 7. Keep the ESAFENET CDG software and all associated components up to date with the latest security patches.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Timeline

First Article

Feedly found the first article mentioning CVE-2024-9560. See article

Oct 6, 2024 at 10:07 PM / Vulners.com RSS Feed
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Oct 6, 2024 at 10:07 PM
CVE Assignment

NVD published the first details for CVE-2024-9560

Oct 6, 2024 at 10:15 PM
CVSS

A CVSS base score of 6.3 has been assigned.

Oct 6, 2024 at 10:20 PM / nvd
EPSS

EPSS Score was set to: 0.05% (Percentile: 16.4%)

Oct 7, 2024 at 1:24 PM
CVSS

A CVSS base score of 8.8 has been assigned.

Oct 15, 2024 at 3:20 PM / nvd
Proof of Concept (PoC) Released

A proof of concept exploit has been released

Oct 15, 2024 at 5:12 PM
Static CVE Timeline Graph

Affected Systems

Esafenet/cdg
+null more

Exploits

https://flowus.cn/share/38f64855-27ec-4170-ac78-f29ca595901e?code=G8A6P3
+null more

Attack Patterns

CAPEC-108: Command Line Execution through SQL Injection
+null more

News

CVE-2024-9560 Exploit
CVE Id : CVE-2024-9560 Published Date: 2024-10-15T15:17:00+00:00 A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. inTheWild added a link to an exploit: https://flowus.cn/share/38f64855-27ec-4170-ac78-f29ca595901e?code=G8A6P3
CVE-2024-9560
Medium Severity Description A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Read more at https://www.tenable.com/cve/CVE-2024-9560
CVE Alert: CVE-2024-9560 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-9560/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_9560
CVE Alert: CVE-2024-9560
Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. Affected Endpoints:
NA - CVE-2024-9560 - A vulnerability was found in ESAFENET CDG V5....
A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file...
See 7 more articles and social media posts

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:High
Integrity:High
Availability Impact:High

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI