CVE-2024-7837

Summary

CVE-2024-7837 is a significant SQL Injection vulnerability affecting Firmanet Software ERP systems through version 22.11.2024. Hackers can exploit this issue by improperly neutralizing special elements in SQL commands, allowing them to inject malicious queries. This vulnerability poses a serious risk to affected systems, and organizations using the ERP software are urged to take immediate action to mitigate the threat. Unfortunately, efforts to contact the vendor for a patch or update have so far been unsuccessful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.