CVE-2025-10095
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-89
Neutralización incorrecta de elementos especiales usados en un comando SQL (Inyección SQL)
Fecha de publicación:
09/09/2025
Última modificación:
10/09/2025
Descripción
*** Pendiente de traducción *** A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server&#39;s database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated database, separate from the main software&#39;s database. This isolation limits the scope of the vulnerability to the SMPP server&#39;s operations. The vulnerability arises from improper sanitization of user input in the SMPP server&#39;s scripts.<br />
<br />
This issue has been fixed in version 6.11.
Impacto
Puntuación base 4.0
5.30
Gravedad 4.0
MEDIA