CVE-2021-44161

CVE-2021-44161 describes a critical SQL injection vulnerability in Changingtec MOTP systems. This flaw, stemming from insufficient validation of user input in a specific function parameter, allows an unauthenticated attacker on the local area network to read, modify, or delete the backend database. With a CVSS score of 8.8 (High), the vulnerability presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high severity warrants immediate attention for affected organizations.