Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00434·Published 2025-03-18·Fixed in V3.187, V4.53CWE-89