Unscored CVE-2021-41063 EUVD-2021-28214GHSA-7532-2whq-rwqh

SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attack…

Published Dec 8, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.

Advisories 1

ICSA-21-334-01 Xylem Aanderaa GeoView CISA ICS & IT advisories · Nov 30, 2021

References

https://www.xylem.com
https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aanderaa-psa-2021-003.pdf
https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/
ICS Advisory (ICSA-21-334-01) third-party-advisory