Electricity Billing System CVE-2025-7610

The CVSS 3.1 score of 7.3 reflects a high-severity vulnerability with network-accessible attack vector (AV:N), low attack complexity (AC:L), and no privilege requirement (PR:N), indicating ease of exploitation. The vector also indicates confidentiality, integrity, and availability impact (C:L/I:L/A:L), though not complete compromise. The public availability of a proof-of-concept exploit significantly elevates real-world risk. Without EPSS data or KEV confirmation provided, the disclosure status indicates active threat potential. The vulnerability qualifies as high-priority because: (1) attack surface is unauthenticated remote access, (2) SQL injection allows database exfiltration and potential code execution via stacked queries or INTO OUTFILE, (3) POC exists enabling rapid weaponization, and (4) small-scale billing systems often lack security monitoring. This is NOT a false-high-CVSS issue—it represents genuine, immediately exploitable risk.

An attacker sends a POST request to http://target/user/change_password.php with payload: new_password=password' UNION SELECT user(),version(),database() -- . This breaks out of the intended UPDATE or INSERT statement, allowing the attacker to extract database metadata, enumerate table names (information_schema), and dump sensitive data (customer names, addresses, payment records, account balances). Advanced exploits could use stacked queries (;DROP TABLE users; --) to destroy data or enable reverse shells via INTO OUTFILE on writable directories. Since authentication is not required (PR:N), any internet-connected attacker can perform reconnaissance and exploitation without prior system access. POC code is publicly available, reducing the barrier to entry for script-kiddies and organized attackers.