CVE-2020-13505: SQL Injection
Published Sep 24, 2020
·Updated
Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
Affected Software
1 affected component
AVEVA Edna Enterprise Data Historian=3.0.1.2\/7.5.4989.33053
Event History
Sep 24, 2020
CVE Published
via MITRE·02:13 PM
Data Sourced
via MITRE·02:13 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-13505.
2
What is the severity of CVE-2020-13505?
CVE-2020-13505 has a severity level of 9.8 (critical).
3
What is the affected software for CVE-2020-13505?
The affected software is Aveva Edna Enterprise Data Historian version 3.0.1.2/7.5.4989.33053.
4
What is the impact of CVE-2020-13505?
CVE-2020-13505 allows unauthenticated SQL injection attacks, which can result in data compromise.
5
How can I fix CVE-2020-13505?
To fix CVE-2020-13505, it is recommended to apply the latest security patches or updates provided by Aveva for the Edna Enterprise Data Historian software.