Radius Xenia M2M Platform
Monthly
Unauthenticated SQL injection in the password-recovery functionality of the Radius Xenia M2M Platform web management interface can let a remote attacker read sensitive data, enumerate the database schema, or alter records. The issue is rated 9.3 (CVSS 4.0) and is prioritized act_now by vuln.today; no public exploit identified at time of analysis, and no CISA KEV listing is provided. Exposure is the key constraint: only instances whose management interface is reachable from the attacker's network position are at risk.
Unauthenticated SQL injection in the password-recovery functionality of the Radius Xenia M2M Platform web management interface can let a remote attacker read sensitive data, enumerate the database schema, or alter records. The issue is rated 9.3 (CVSS 4.0) and is prioritized act_now by vuln.today; no public exploit identified at time of analysis, and no CISA KEV listing is provided. Exposure is the key constraint: only instances whose management interface is reachable from the attacker's network position are at risk.