CVE-2015-1008

SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input.

Score

CVSS 2.0 6.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-05-26

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Ams Device Manager (Emerson)

References

• http://community.emerson.com/process/emerson-exchange/operateandmanage/deltav/deltav_security/b/securitynotificationblo…
• http://www.securityfocus.com/bid/74774
• https://ics-cert.us-cert.gov/advisories/ICSA-15-111-01