CVE-2024-7078

CVE-2024-7078 is a critical SQL Injection vulnerability affecting Semtek Informatics Software Consulting Inc.'s Semtek Sempos software, specifically versions through 31072024. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and lack of user interaction required. While there is currently no evidence of active exploitation, public exploit code, or significant community discussion, the high severity warrants immediate attention and patching.