CVE-2023-33366

CVE-2023-33366 is a high-severity SQL injection vulnerability affecting Suprema BioStar 2 versions prior to 2.9.1. Authenticated attackers can exploit this flaw to inject and execute arbitrary SQL commands, potentially leading to full compromise of the underlying database. With a CVSS score of 8.8, this vulnerability is easily exploitable over the network with low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for significant data compromise warrants attention.