CVE-2024-52057: Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0., from 5.2.0 before 5.3..
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52057?
CVE-2024-52057 has been identified as a critical SQL Injection vulnerability.
How do I fix CVE-2024-52057?
To fix CVE-2024-52057, upgrade RTI Connext Professional to version 7.3.0 or later, or to 6.1.2.17 or later.
What products are affected by CVE-2024-52057?
CVE-2024-52057 affects RTI Connext Professional versions from 5.2.0 to before 7.3.0, as well as specific 6.x versions.
Can CVE-2024-52057 allow unauthorized access?
Yes, CVE-2024-52057 can allow attackers to execute SQL commands, potentially leading to unauthorized data access.
Is there a workaround for CVE-2024-52057?
There is no documented workaround for CVE-2024-52057; upgrading the software is recommended.