CVE-2025-68394: SQL Injection in Protectel

Published Oct 30, 2026

Updated

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "profilInput" parameter allows for SQL Injection attacks. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ARKETEAM Protectel PROTECTELMAJ to a version that resolves this vulnerability.
Fixed in 6.5.19
Upgrade
Upgrade ARKETEAM Protectel BDF to a version that resolves this vulnerability.
Fixed in 6.4.67

Event History

Oct 30, 2026

CVE Published

via MITRE·11:37 AM

Data Sourced

via MITRE·11:37 AM

DescriptionWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

The issue affects ARKETEAM Protectel modules PROTECTELMAJ and BDF when using versions earlier than PROTECTELMAJ v6.5.19 or BDF v6.4.67.

What access does an attacker need?

An attacker needs low-privileged user access and the ability to supply input to the profilInput parameter. No user interaction is required.

Is there an indication that default configurations are affected?

The available information does not state whether the vulnerable parameter is reachable or usable in a default configuration. Exposure depends on whether low-privileged users can access functionality that submits profilInput.

What should be done to remediate the issue?

Update PROTECTELMAJ to v6.5.19 or BDF to v6.4.67, as applicable. If updates cannot be applied immediately, restrict low-privileged access to functionality accepting the profilInput parameter where operationally possible.

CVE-2025-68394: SQL Injection in Protectel

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

Is there an indication that default configurations are affected?

What should be done to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

Is there an indication that default configurations are affected?

What should be done to remediate the issue?