CVE-2026-2584

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2584", "assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "state": "PUBLISHED", "assignerShortName": "INCIBE", "dateReserved": "2026-02-16T13:17:13.207Z", "datePublished": "2026-03-02T09:01:12.291Z", "dateUpdated": "2026-03-02T13:24:05.109Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CSIP firmware", "vendor": "Ciser System SL", "versions": [{"status": "affected", "version": "3.0 to 5.1", "versionType": "fixed"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L)."}], "value": "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L)."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "shortName": "INCIBE", "dateUpdated": "2026-03-02T09:01:12.291Z"}, "references": [{"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-ciser-system-sl-firmware"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The vulnerability has been fixed by the vendor through improved input validation logic and parameterized queries:</p><p>It is recommended to update to firmware version 5.3 or higher. This version mitigates the risk by ensuring that SQL queries are handled securely, effectively neutralizing the injection vector.</p>"}], "value": "The vulnerability has been fixed by the vendor through improved input validation logic and parameterized queries:\n\nIt is recommended to update to firmware version 5.3 or higher. This version mitigates the risk by ensuring that SQL queries are handled securely, effectively neutralizing the injection vector."}], "source": {"discovery": "UNKNOWN"}, "title": "SQL Injection in Ciser System SL firmware", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>If an immediate firmware update is not feasible, network-level controls must be implemented to reduce the attack surface:</p><ul><li>Access Restriction: Limit access to the management or login panel using an Allowlist. All connection attempts from untrusted networks or the public internet must be strictly blocked.</li><li>Network Segmentation: Isolate the management interface within a dedicated management VLAN, accessible only through a secure corporate VPN.</li></ul>"}], "value": "If an immediate firmware update is not feasible, network-level controls must be implemented to reduce the attack surface:\n\n * Access Restriction: Limit access to the management or login panel using an Allowlist. All connection attempts from untrusted networks or the public internet must be strictly blocked.\n * Network Segmentation: Isolate the management interface within a dedicated management VLAN, accessible only through a secure corporate VPN."}], "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-02T13:23:54.693229Z", "id": "CVE-2026-2584", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-02T13:24:05.109Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2584", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-02T13:23:54.693229Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-02T13:23:59.440Z"}}], "cna": {"title": "SQL Injection in Ciser System SL firmware", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Ciser System SL", "product": "CSIP firmware", "versions": [{"status": "affected", "version": "3.0 to 5.1", "versionType": "fixed"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The vulnerability has been fixed by the vendor through improved input validation logic and parameterized queries:\n\nIt is recommended to update to firmware version 5.3 or higher. This version mitigates the risk by ensuring that SQL queries are handled securely, effectively neutralizing the injection vector.", "supportingMedia": [{"type": "text/html", "value": "<p>The vulnerability has been fixed by the vendor through improved input validation logic and parameterized queries:</p><p>It is recommended to update to firmware version 5.3 or higher. This version mitigates the risk by ensuring that SQL queries are handled securely, effectively neutralizing the injection vector.</p>", "base64": false}]}], "references": [{"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-ciser-system-sl-firmware"}], "workarounds": [{"lang": "en", "value": "If an immediate firmware update is not feasible, network-level controls must be implemented to reduce the attack surface:\n\n * Access Restriction: Limit access to the management or login panel using an Allowlist. All connection attempts from untrusted networks or the public internet must be strictly blocked.\n * Network Segmentation: Isolate the management interface within a dedicated management VLAN, accessible only through a secure corporate VPN.", "supportingMedia": [{"type": "text/html", "value": "<p>If an immediate firmware update is not feasible, network-level controls must be implemented to reduce the attack surface:</p><ul><li>Access Restriction: Limit access to the management or login panel using an Allowlist. All connection attempts from untrusted networks or the public internet must be strictly blocked.</li><li>Network Segmentation: Isolate the management interface within a dedicated management VLAN, accessible only through a secure corporate VPN.</li></ul>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L).", "supportingMedia": [{"type": "text/html", "value": "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L).", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "shortName": "INCIBE", "dateUpdated": "2026-03-02T09:01:12.291Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2584", "state": "PUBLISHED", "dateUpdated": "2026-03-02T13:24:05.109Z", "dateReserved": "2026-02-16T13:17:13.207Z", "assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516", "datePublished": "2026-03-02T09:01:12.291Z", "assignerShortName": "INCIBE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "CSIP firmware", "vendor": "Ciser System SL", "versions": [{"status": "affected", "version": "3.0 to 5.1", "versionType": "fixed"}]}], "source": "cve-coordination@incibe.es"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L)."}, {"lang": "es", "value": "Una cr\u00edtica vulnerabilidad de inyecci\u00f3n SQL (SQLi) ha sido identificada en el m\u00f3dulo de autenticaci\u00f3n del sistema. Un atacante remoto no autenticado (AV:N/PR:N) puede explotar esta falla enviando consultas SQL especialmente dise\u00f1adas a trav\u00e9s de la interfaz de inicio de sesi\u00f3n. Debido a la baja complejidad del ataque (AC:L) y la ausencia de requisitos espec\u00edficos (AT:N), la vulnerabilidad permite un compromiso total de los datos de configuraci\u00f3n del sistema (VC:H/VI:H). Si bien la disponibilidad del servicio permanece inalterada (VA:N), la brecha puede conducir a una exposici\u00f3n limitada de informaci\u00f3n sensible con respecto a sistemas subsiguientes o interconectados (SC:L)."}], "id": "CVE-2026-2584", "lastModified": "2026-06-17T10:31:21.470", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cve-coordination@incibe.es", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2584", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-02T13:23:54.693229Z", "version": "2.0.3"}}]}, "published": "2026-03-02T09:16:18.150", "references": [{"source": "cve-coordination@incibe.es", "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-ciser-system-sl-firmware"}], "sourceIdentifier": "cve-coordination@incibe.es", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "cve-coordination@incibe.es", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.0,5.1]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "CSIP firmware", "source": "cna", "vendor": "Ciser System SL"}, "product": "csip_firmware", "vendor": "ciser_system"}], "analysis": {"en": {"generated_at": "2026-04-18T17:31:59.923853+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2011supplied firmware update to version\u202f5.3 or higher, which introduces parameterized queries to neutralize the injection risk.", "If a firmware upgrade cannot be performed immediately, limit access to the management login interface by applying an allow\u2011list of trusted IP addresses, blocking all other remote connections.", "Further isolate the management interface by placing it on a dedicated VLAN and ensuring that only traffic entering through a secure corporate VPN can reach the affected device."], "summary": {"action": "Immediate Patch", "impact": "Remote SQL injection leading to configuration compromise"}, "threat_synthesis": {"affected_systems": "The affected product is the Ciser System SL CSIP firmware. All firmware releases prior to version\u202f5.3 lack the improved input validation and parameterized queries introduced in version\u202f5.3, and therefore remain vulnerable. Any device running these unpatched firmware versions should be identified and upgraded.", "description_and_impact": "An unauthenticated, remote attacker can send specially crafted SQL commands through the Ciser System SL CSIP firmware login interface. The flaw exists because user input is incorporated directly into database queries without proper parameterization, a classic SQL injection weakness (CWE-89). Exploitation of this vulnerability allows the attacker to fully compromise the system\u2019s configuration data, affecting both confidentiality and integrity of sensitive information. The attack is possible from an external endpoint with no authentication or privilege escalation required, and the availability of the service is not impacted.", "risk_and_exploitability": "The CVSS score of 9.3 classifies this flaw as Critical, and the EPSS score of less than\u202f1% indicates a low probability of exploitation in the current data set. Because the vulnerability can be triggered by an unauthenticated, remote attacker without special privileges, the risk is largely driven by the ease of exploitation and the high impact on configuration integrity and confidentiality. The flaw is not listed in the CISA KEV catalog, but its severity and exploitation simplicity warrant prompt mitigation."}}}}, "created": "2026-03-03T08:45:31.464945+00:00", "updated": "2026-04-18T17:45:06.047103+00:00", "vendors": ["ciser_system", "ciser_system$PRODUCT$csip_firmware"]}