CVE-2024-1839 CRITICAL

CVE-2024-1839

Vendor Intrado
Product 911 Emergency Gateway (EGW)
Weakness CWE-89 · SQLi
Published June 26, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Intrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL injection, which may allow an unauthenticated remote attacker to execute malicious code, exfiltrate data, or manipulate the database.

Key dates

02Disclosure timeline

June 26, 2024 CVE published
August 1, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-24773 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability CVE-2026-33485 AVideo has an Unauthenticated Blind SQL Injection in RTMP on_publish Callback via Stream Name Parameter CVE-2025-11606 iPynch Social Network Website Search sql injection CVE-2025-7176 PHPGurukul Hospital Management System view-medhistory.php sql injection CVE-2021-24149 Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection