CVE-2024-33335
MEDIUMH3C SeaSQL DWS V2.0 - Remote Code Execution via Crafted File
Title source: llmDescription
SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.
References (3)
Core 3
Core References
Various Sources
https://www.h3c.com/cn/Service/Online_Help/psirt/
Various Sources
https://gist.github.com/vrhappy/08cb4c8721eed8a74fe786ecdff1ec1e
Various Sources
https://www.h3c.com/cn/
Scores
CVSS v3
6.3
EPSS
0.0053
EPSS Percentile
40.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-94
Status
published
Published
Jun 20, 2024
Tracked Since
Feb 18, 2026