CVE-2022-1277

CVE-2022-1277 is a critical unauthenticated SQL Injection vulnerability affecting Inavitas Solar Log products. With a CVSS score of 9.8, it allows remote attackers to execute arbitrary SQL queries without authentication, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community attention with 10 mentions, indicating potential interest from threat actors. Organizations using Inavitas Solar Log should prioritize patching to mitigate this severe risk.