songqb-xx/Internet-of-Things-Smart-Water-Meter-Monitoring-Platform-Unauthorized-RCE

songqb-xx/Internet-of-Things-Smart-Water-Meter-Monitoring-Platform-Unauthorized-RCE

Releases0
The IoT smart water meter monitoring platform affiliated to Shandong Kede Electronics Co., Ltd. has an unauthorized remote code execution (RCE) vulnerability

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL

SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker to execute arbitrary code via the imei_list.aspx file.