What is CVE-2023-37777?

CVE-2023-37777 is a critical-severity vulnerability in N/a, classified under SQL Injection. CVSS score: 9.8/10. Published 2025-01-22.

How severe is CVE-2023-37777?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in N/a

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation could lead to unauthorized access to database records with DB administrator privileges which can be leveraged to escalate privileges further and execute arbitrary OS commands.

Vulnerability class: SQL Injection

EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

Frequently asked questions

What is CVE-2023-37777?: CVE-2023-37777 is a critical-severity vulnerability in N/a, classified under SQL Injection. CVSS score: 9.8/10. Published 2025-01-22.
How severe is CVE-2023-37777?: Critical severity. CVSS v3 base score is 9.8 out of 10.