CVE-2022-4557

CRITICAL

Group Arge Energy and Control Systems Smartpower Web <23.01.01 - SQ...

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01.

References (2)

Core 2

Core References

Third Party Advisory government-resource broken-link

https://www.usom.gov.tr/bildirim/tr-23-0066

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0066

Scores

CVSS v3 9.8

EPSS 0.0066

EPSS Percentile 47.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

Group Arge Energy and Control Systems/Smartpower Web < 23.01.01

gruparge/smartpower < 23.01.01

Published Feb 12, 2023

Tracked Since Feb 18, 2026