Access Control System
Monthly
Open redirect in Armiya Information Technologies Access Control System (all versions before Versiyon 2) lets remote attackers craft URLs that silently redirect authenticated victims to attacker-controlled sites, enabling source-of-data spoofing and phishing. Reported by Turkey's national CSIRT (TR-CERT); no public exploit identified at time of analysis and no EPSS/KEV data is available. The vendor-assigned CVSS of 9.3 appears substantially overstated for a classic CWE-601 open redirect.
SQL injection in Armiya Information Technologies' Access Control System (all versions before Versiyon 2) lets remote attackers inject arbitrary SQL through improperly neutralized input, per the CVSS 3.1 vector without prior authentication. Because this is a physical/logical access-control platform, successful injection can expose or manipulate the backing database of credentials, cardholders, and access rules. No public exploit identified at time of analysis; the flaw was coordinated through Turkey's national CERT (TR-CERT).
Open redirect in Armiya Information Technologies Access Control System (all versions before Versiyon 2) lets remote attackers craft URLs that silently redirect authenticated victims to attacker-controlled sites, enabling source-of-data spoofing and phishing. Reported by Turkey's national CSIRT (TR-CERT); no public exploit identified at time of analysis and no EPSS/KEV data is available. The vendor-assigned CVSS of 9.3 appears substantially overstated for a classic CWE-601 open redirect.
SQL injection in Armiya Information Technologies' Access Control System (all versions before Versiyon 2) lets remote attackers inject arbitrary SQL through improperly neutralized input, per the CVSS 3.1 vector without prior authentication. Because this is a physical/logical access-control platform, successful injection can expose or manipulate the backing database of credentials, cardholders, and access rules. No public exploit identified at time of analysis; the flaw was coordinated through Turkey's national CERT (TR-CERT).