CVE-2024-8630

Summary

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.

Affected Software

VendorProductVersion RangeStatus
AlisonicSibyllaall versionsaffected

Weaknesses

  • CWE-89: CWE-89 SQL Injection

Workarounds

Alisonic did not respond to CISA's attempts at coordination. Users of Alisonic Sibylla are encouraged to contact Alisonic (Telephone: +39 0362 1547580, Email: info@alisonic.it) https://alisonic.it/contact.html and keep their systems up to date.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References