What’s Vulnerable › Vulnerabilities
CVE-2024-52335
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-06 · updated 2026-06-17
- Weakness: CWE-89
Description
A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL commands to compromise the whole database.
Affected products
- Siemens Syngo Plaza Vb30E: before VB30E_HF05 — fixed in VB30E_HF05
How to fix
Upgrade to a fixed version: Siemens Syngo Plaza Vb30E VB30E_HF05. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-52335 or the next vulnerability affects your stack