First published: Wed Jul 06 2016(Updated: )
SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Bosch BLADEcontrol-WebVIS | <=3.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4507 has a high severity rating due to its potential for allowing unauthorized SQL command execution.
To address CVE-2016-4507, upgrade your Bosch BLADEcontrol-WebVIS software to version 3.0.3 or later.
Potential impacts of CVE-2016-4507 include data leakage, data modification, or total compromise of the database.
CVE-2016-4507 affects users of Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier.
Yes, exploitation of CVE-2016-4507 requires remote authenticated access to the affected system.