CVE-2025-41771: SQL injection
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41771?
CVE-2025-41771 has a medium severity rating of 4.3.
How do I fix CVE-2025-41771?
To fix CVE-2025-41771, ensure that input validation and parameterized queries are used to prevent SQL injection.
What is the impact of CVE-2025-41771?
The impact of CVE-2025-41771 is limited to the system’s notification functionalities due to its vulnerability affecting a SQLite database.
Who is affected by CVE-2025-41771?
Authenticated attackers with low privileges are potentially able to exploit CVE-2025-41771.
What type of vulnerability is CVE-2025-41771?
CVE-2025-41771 is categorized as an SQL injection vulnerability.