Critical severity9.8NVD Advisory· Published Jul 29, 2024· Updated Jun 17, 2026

CVE-2024-7202

Description

The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Simopro Technology/WinMatrix3 Webllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-7963-44648-2.htmlnvdThird Party Advisory
www.twcert.org.tw/tw/cp-132-7962-dd216-1.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000