CVE-2025-55703

Katalog CVE

CVSS 3.3 · Low EPSS 0,14%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada sunbirddcim power iq. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

Rincian

Terbit di NVD

15 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pastebin.com/C6hVPpF4 advisory pihak ketiga
• https://www.sunbirddcim.com/ product