CVE-2024-8630 CRITICAL

CVE-2024-8630: Alisonic Sibylla SQL Injection

Vendor Alisonic
Product Sibylla
Weakness CWE-89 · SQLi
Published September 27, 2024
Last update September 27, 2024
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.

Key dates

02Disclosure timeline

September 27, 2024 CVE published
September 27, 2024 Record updated