Traffic Analysis System
Monthly
SQL injection in UMAI Vision Traffic Analysis System (versions 29/30 up to but not including 34) lets remote unauthenticated attackers inject arbitrary SQL commands through unsanitized input, enabling full database compromise. Rated CVSS 9.8 with a network, no-privilege, no-interaction vector, the flaw was reported by Turkey's national CERT (TR-CERT) and has a vendor patch available. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
SQL injection in UMAI Vision Traffic Analysis System (versions 29/30 up to but not including 34) lets remote unauthenticated attackers inject arbitrary SQL commands through unsanitized input, enabling full database compromise. Rated CVSS 9.8 with a network, no-privilege, no-interaction vector, the flaw was reported by Turkey's national CERT (TR-CERT) and has a vendor patch available. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.