Karel Electronics

TR-CERT Warns of Critical SQL Injection in Unsupported KarelIPS

Unsupported KarelIPS has an unauthenticated blind SQL-injection flaw with no fixed release identified. Restrict exposure, preserve relevant evidence and plan retirement or replacement; compensating controls do not repair the defect.