CVE-2023-37439

Summary

CVE-2023-37439 refers to multiple SQL injection vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator. These vulnerabilities allow authenticated remote attackers to manipulate data in the underlying database, potentially gaining unauthorized access to sensitive information. The exposure and corruption of such data controlled by the EdgeConnect SD-WAN Orchestrator host could result from successful exploitation of these vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.