What is CVE-2025-55703?

CVE-2025-55703 is a low-severity vulnerability in Sunbirddcim Power Iq, classified under SQL Injection. CVSS score: 2.5/10. Published 2025-12-15.

How severe is CVE-2025-55703?

Low severity. CVSS v3 base score is 2.5 out of 10.

SQL Injection in Sunbirddcim Power Iq

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

Vulnerability class: SQL Injection

EPSS: 0.001 (2.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N.

Affected products

Sunbirddcim Power_iq — versions 9.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Product)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2025-55703?: CVE-2025-55703 is a low-severity vulnerability in Sunbirddcim Power Iq, classified under SQL Injection. CVSS score: 2.5/10. Published 2025-12-15.
How severe is CVE-2025-55703?: Low severity. CVSS v3 base score is 2.5 out of 10.