Description
In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weidmueller Interface | PROCON-WEB SCADA | 1.0.0 – ≤ 6.11.2 | — |
Advisories 1
- VDE-2026-085 Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA CERT@VDE · Jul 28, 2026