CVE-2023-3000

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.

Score

CVSS 3.1 9.8 Critical

Status

Modified - iletisim@usom.gov.tr

Published

2023-06-02

Last modified

2026-05-22

Weaknesses

CWE-89

Affected products

• Ermon (Erikoglu Technology)
• Energy Monitoring (Erikogluteknoloji)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0315
• https://www.usom.gov.tr/bildirim/tr-23-0315