Feijiu Medical Technology Co., Ltd. Vulnerabilities and Affected Products
Vulnerabilities associated with Bian Que Feijiu Intelligent Emergency and Quality Control System.
Products
Clear product| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-34162CRITICAL | Bian Que Feijiu Intelligent Emergency and Quality Control System SQL Injection via GetLyfsByParamsAn unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, accessible via the /AppService/BQMedical/WebServiceForFirstaidApp.asmx interface. The backend fails to properly sanitize user-supplied input in the strOpid parameter, allowing attackers to inject arbitrary SQL statements. This can lead to data exfiltration, authentication bypass, and potentially remote code execution, depending on backend conf… CWE-89Aug 27, 2025 | CVSS9.3v4.0 | EPSS0.628% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |