Acrel ECEMS Microgrid Management System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System version 1.3.0. The issue arises in an unknown function of the file '/SubstationWEBV2/main/elecMaxMinAvgValue', where manipulation of the 'fCircuitids' argument can be exploited. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unauthorized SQL injection, which could lead to database manipulation or disclosure of sensitive information.