CVE-2025-8773 in Monitoring Platform 甘肃省危险品库监控平台
Summary
by MITRE • 08/09/2025
A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/login_getPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 09/16/2025
This critical vulnerability in the Dinstar Monitoring Platform version 1.0 represents a severe sql injection flaw that undermines the security posture of the甘肃省危险品库监控平台 system. The vulnerability exists within the /itc/${appPath}/login_getPasswordErrorNum.action endpoint where the userBean.loginName parameter is improperly handled, allowing attackers to inject malicious sql code through the login name field. This represents a classic sql injection vulnerability that falls under the CWE-89 category, where untrusted data is directly incorporated into sql queries without proper sanitization or parameterization. The attack vector is remote, meaning threat actors can exploit this weakness from external networks without requiring physical access to the system infrastructure.
The operational impact of this vulnerability is substantial as it provides attackers with potential unauthorized access to the monitoring platform's database containing sensitive information about hazardous material storage facilities. The sql injection attack could enable adversaries to extract confidential data, modify user credentials, or even escalate privileges within the system. According to the ATT&CK framework, this vulnerability maps to technique T1190 - Exploit Public-Facing Application, where attackers target vulnerabilities in externally accessible applications to gain initial access. The fact that an exploit has been publicly disclosed and is potentially in active use significantly increases the risk to affected organizations, as it removes the element of surprise that typically protects systems from zero-day attacks.
The lack of vendor response to early disclosure attempts compounds the severity of this situation, leaving affected organizations without official patches or mitigation guidance. This delay in vendor communication creates a window of opportunity for attackers to exploit the vulnerability while organizations remain unaware of the specific threat. Organizations should immediately implement network segmentation to limit access to the affected monitoring platform, deploy intrusion detection systems to monitor for sql injection attempts, and consider implementing web application firewalls to filter malicious sql payloads. Additionally, conducting comprehensive network scans to identify all instances of the vulnerable Dinstar Monitoring Platform version 1.0 across the organization is essential, as the vulnerability may be present in multiple locations within the hazardous material storage infrastructure. The vulnerability demonstrates the critical importance of timely patch management and vendor communication in maintaining cybersecurity defenses against known threats.