Executive brief
Raisecom's Communication Command and Dispatch Management Platform is used for emergency response and dispatch operations. A SQL injection vulnerability in the password retrieval endpoint allows remote attackers to execute arbitrary database queries and potentially extract sensitive user credentials and operational data.
Technical details
The vulnerability is a SQL injection (SQLi) in the /app/users/getpwd.php endpoint, specifically in the "sip" parameter. The affected component fails to properly sanitize user input before constructing SQL queries, allowing an unauthenticated remote attacker to inject malicious SQL commands. The vulnerability can be exploited over the network without requiring authentication or user interaction. A successful exploit enables attackers to read or modify database contents, potentially compromising user accounts, credentials, and operational data. Patches are not yet available; the vendor has not responded to disclosure attempts.
Affected products
- Raisecom Communication Command and Dispatch Management Platform up to 7.6.5
Timeline
- 2026-08-14: disclosed