SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker to execute arbitrary code via the imei_list.aspx file.
References
| Link | Resource |
|---|---|
| https://github.com/songqb-xx/Internet-of-Things-Smart-Water-Meter-Monitoring-Platform-Unauthorized-RCE | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Feb 2026, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/songqb-xx/Internet-of-Things-Smart-Water-Meter-Monitoring-Platform-Unauthorized-RCE - Exploit, Third Party Advisory | |
| First Time |
Sdkede iot Smart Water Meter
Sdkede Sdkede iot Smart Water Meter Firmware |
|
| CPE | cpe:2.3:o:sdkede:iot_smart_water_meter_firmware:1.0:*:*:*:*:*:*:* cpe:2.3:h:sdkede:iot_smart_water_meter:-:*:*:*:*:*:*:* |
04 Feb 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-11 19:25
NVD link : CVE-2025-63624
Mitre link : CVE-2025-63624
CVE.ORG link : CVE-2025-63624
JSON object : View
Products Affected
sdkede
- iot_smart_water_meter_firmware
- iot_smart_water_meter
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')