Platform
other
Component
tcman-gim
Opgelost in
8.0.1
11.0.1
CVE-2021-40850 describes a critical SQL injection vulnerability affecting TCMAN GIM versions 8.0 through 11.0. This flaw allows attackers to inject malicious SQL code through several webservice methods located within the /PC/WebService.asmx endpoint, potentially leading to unauthorized data access and manipulation. A patch is available to remediate this vulnerability.
The SQL injection vulnerability in TCMAN GIM presents a significant risk to data confidentiality and integrity. An attacker could leverage this flaw to bypass authentication mechanisms and directly query the underlying database. This could result in the exfiltration of sensitive information such as user credentials, financial data, or proprietary business information. Furthermore, depending on the database permissions, an attacker might be able to modify or delete data, leading to operational disruption and potential data loss. The impact is particularly severe given the potential for unauthorized access to a wide range of data stored within the GIM system.
CVE-2021-40850 was publicly disclosed on December 17, 2021. The vulnerability's critical severity (CVSS score of 10) indicates a high likelihood of exploitation. While no active campaigns have been publicly confirmed, the ease of exploitation and the potential impact make it a likely target for malicious actors. The vulnerability is not currently listed on the CISA KEV catalog.
Organizations utilizing TCMAN GIM versions 8.0 through 11.0, particularly those handling sensitive data or operating in regulated industries, are at significant risk. Environments with weak database security configurations or limited input validation practices are especially vulnerable.
• linux / server:
journalctl -u TCMAN_GIM | grep -i "SQL injection"• generic web:
curl -I 'http://<target>/PC/WebService.asmx?param='; # Check for SQL injection indicators in response headersdisclosure
Exploit Status
EPSS
0.26% (50% percentiel)
CVSS-vector
The primary mitigation for CVE-2021-40850 is to upgrade to a patched version of TCMAN GIM. Consult the vendor's advisory for the specific version containing the fix. If immediate patching is not feasible, consider implementing temporary workarounds such as input validation and sanitization on the /PC/WebService.asmx endpoint. Web Application Firewalls (WAFs) configured with rules to detect and block SQL injection attempts can also provide a layer of protection. Carefully review and restrict database user permissions to minimize the potential impact of a successful attack. After upgrade, confirm the vulnerability is resolved by attempting a SQL injection payload through the /PC/WebService.asmx endpoint and verifying that it is properly sanitized.
Actualizar TCMAN GIM a una versión corregida que mitigue la vulnerabilidad de inyección SQL. Consultar al proveedor para obtener la versión actualizada y las instrucciones de instalación. Aplicar las medidas de seguridad recomendadas por el proveedor para proteger la aplicación.
Kwetsbaarheidsanalyses en kritieke waarschuwingen direct in uw inbox.
CVE-2021-40850 is a critical SQL injection vulnerability in TCMAN GIM versions 8.0–11.0, allowing attackers to potentially extract sensitive data via the /PC/WebService.asmx endpoint.
If you are running TCMAN GIM versions 8.0 through 11.0, you are potentially affected by this vulnerability. Immediate action is recommended.
Upgrade to a patched version of TCMAN GIM as soon as possible. Consult the vendor's advisory for the specific version containing the fix. Consider temporary workarounds like input validation if patching is delayed.
While no active campaigns have been publicly confirmed, the vulnerability's critical severity and ease of exploitation make it a likely target for malicious actors.
Refer to the TCMAN vendor's website or security advisory channels for the official advisory regarding CVE-2021-40850.
Upload je dependency-bestand en kom direct te weten of deze en andere CVEs jou raken.