Description (CNA)
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / blueplanet 100 NX3 M8 | affected 0 before * |
| Siemens / blueplanet 100 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 105 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 105 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 110 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 125 NX3 M10 | affected 0 before * |
| Siemens / blueplanet 125 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 125 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 137 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 150 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 150 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 155 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 155 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 165 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 165 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 25.0 NX3-33.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 3.0 NX3-20.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 3.0-5.0 NX1 | unaffected 0 before * |
| Siemens / blueplanet 360 NX3 M6 | unaffected 0 before * |
| Siemens / blueplanet 50.0 NX3-60.0 NX3 | unaffected 0 before * |
| Siemens / blueplanet 87.0 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 87.0 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet 92.0 TL3 | affected 0 before V3.92 |
| Siemens / blueplanet 92.0 TL3 GEN2 | affected 0 before * |
| Siemens / blueplanet gridsave 110 TL3-S | affected 0 before V3.92 |
| Siemens / blueplanet gridsave 137 TL3-S | affected 0 before V3.92 |
| Siemens / blueplanet gridsave 92.0 TL3-S | affected 0 before V3.92 |
| Siemens / blueplanet hybrid 10.0 TL3 | unaffected 0 before * |
| Siemens / blueplanet hybrid 6.0 NH3-12.0 NH3 | unaffected 0 before * |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.