{"id":"CVE-2023-1863","aliases":["EUVD-2023-24065","GHSA-pxp2-fv6q-mfmr"],"status":"published","title":"SQLi in Eskom Computer Water Metering Software","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.\n\nThis issue affects Water Metering Software: before 23.04.06.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00718,"percentile":0.54121,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-04-14T08:14:06Z","modified":"2026-06-17T05:28:55Z","products":[{"vendor":"eskom","product":"el_terminali_\\(su_okuma\\)_uygulamalarimiz"},{"vendor":"eskom","product":"water metering software"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-23-0225","tags":["government-resource","broken-link","x_transferred","Third Party Advisory"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0225","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1863"},{"url":"https://github.com/advisories/GHSA-pxp2-fv6q-mfmr"}],"sources":{"cve":[{"id":"CVE-2023-1863","title":"SQLi in Eskom Computer Water Metering Software","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.\n\nThis issue affects Water Metering Software: before 23.04.06.","status":"published","published":"2023-04-14T08:14:06.058Z","modified":"2026-05-22T11:52:09.213Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:31.657022Z"}],"euvd":[{"id":"EUVD-2023-24065","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.\n\nThis issue affects Water Metering Software: before 23.04.06.","status":"published","published":"2023-04-14T08:14:06Z","modified":"2026-05-22T11:52:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:21:12.869457Z"}],"ghsa":[{"id":"GHSA-pxp2-fv6q-mfmr","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Computer Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06.\n\n","status":"published","published":"2023-04-14T09:30:19Z","modified":"2023-04-14T09:30:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:30.36158Z"}],"nvd":[{"id":"CVE-2023-1863","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.\n\nThis issue affects Water Metering Software: before 23.04.06.","status":"published","published":"2023-04-14T09:15:06.967Z","modified":"2026-06-17T05:28:55.18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:55.652109Z"}]}}