Volerion logoVolerion
Volerion logoVolerion

TONNET E-LAN Hybrid Recording System SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the E-LAN Hybrid Recording System developed by TONNET. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents. The issue affects the TPR7308 model.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and access or modify database information.

Remediation

Users are advised to update the firmware to version mdiskTRS08_tonnet_20260203-1636 or later.

Added: May 20, 2026, 4:19 AM
Updated: May 20, 2026, 4:19 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
7.4
remediation
0.0
relevance
8.6
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.