CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05.

Score

CVSS 3.1 9.8 Critical

Status

Modified - office@cyberdanube.com

Published

2024-09-25

Last modified

2025-11-04

Weaknesses

CWE-89

Affected products

• Netman 204 (Riello)
• Netman 204 Firmware (Riello-ups)

References

• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html
• http://seclists.org/fulldisclosure/2024/Sep/50