CVE-2021-3604

CVE-2021-3604 is a critical Blind SQL Injection vulnerability affecting primion_digitek Secure 8 (Evalos) that stems from improper user input validation. This flaw allows an unauthenticated remote attacker to extract sensitive user and administrator account information from the database. With a CVSS score of 9.8, the vulnerability is easily exploitable over the network with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.