Skip to content
OpenAdvisories
High · 7.2 CVE-2023-24835 EUVD-2023-28825GHSA-gpxg-3cwf-59mg

Softnext SPAM SQR - Code Injection

Published Mar 27, 2023 · Updated Feb 19, 2025 · Assigned by twcert

Description

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service.

Affected products

VendorProductAffectedFixed
Softnext SPAM SQR unspecified – < 2.221231 2.221231

References