Read the docs
TI-2024-06250 Aliases CVE-2024-6743GHSA-884p-hj4j-mw3h

AguardNet Space Management System - SQL injection

Priority MEDIUM 50CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00678 52nd percentileScored 2026-11-07
Fix Fixed Space Management System (AguardNet): 2024-04-09-3302

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AguardNetSpace Management Systemall to before 2024-04-09-33022024-04-09-3302Patch availableCNA
  • Space Management System VendorAguardNet Affected all to before 2024-04-09-3302 Fixed in 2024-04-09-3302 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:space_management_system_project:space_management_system:*:*:*:*:*:*:*:*before 2024-04-09-3302VulnerableSpace Management System Project
cpe:2.3:a:space_management_system_project:space_management_system:2024-04-09-3302:*:*:*:*:*:*:*2024-04-09-3302VulnerableSpace Management System Project
  • cpe:2.3:a:space_management_system_project:space_management_system:*:*:*:*:*:*:*:* Versions before 2024-04-09-3302 Vulnerable ·Space Management System Project
  • cpe:2.3:a:space_management_system_project:space_management_system:2024-04-09-3302:*:*:*:*:*:*:* Versions 2024-04-09-3302 Vulnerable ·Space Management System Project

Remediation

  • Fix · CNA Space Management System (AguardNet) Fixed in 2024-04-09-3302

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    AguardNet Space Management System 2024-04-09-3302

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-06249 AguardNet Space Management System - Reflected Cross-Site ScriptingPriority LOW 24
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6743
  2. 2026-10-03 Alias added: GHSA-884p-hj4j-mw3h

References

Advisory 2

  • TI-2024-06249 AguardNet Space Management System - Reflected Cross-Site Scripting CVSS 3.1MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences