CVE-2023-33366

HIGH

Suprema BioStar 2 <2.9.1 - SQL Injection

Title source: llm

Description

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

References (2)

Core 2

Core References

Third Party Advisory

https://claroty.com/team82/disclosure-dashboard/cve-2023-33366

Release Notes

https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291

Scores

CVSS v3 8.8

EPSS 0.0060

EPSS Percentile 44.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

supremainc/biostar_2 < 2.9.1

Published Aug 03, 2023

Tracked Since Feb 18, 2026