CVE-2025-7343 CRITICAL

CVE-2025-7343: Digiwin｜SFT - SQL Injection

Vendor Digiwin
Product SFT
Weakness CWE-89 · SQLi
Published July 21, 2025
Last update July 21, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Key dates

02Disclosure timeline

July 21, 2025 CVE published
July 21, 2025 Record updated