Critical severity9.8NVD Advisory· Published Jun 2, 2023· Updated Jun 17, 2026

CVE-2023-3000

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass.

This issue affects ErMon: before 230602.

Affected products

Erikogluteknoloji/Energy Monitoring
cpe:2.3:a:erikogluteknoloji:energy_monitoring:*:*:*:*:*:*:*:*
Range: <230602
Erikoglu Technology/ErMonllm-fuzzy2 versions
<230602+ 1 more
- (no CPE)range: <230602
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-23-0315nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0315nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000