A critical Blind SQL injection vulnerability in Eksagate SYSGUARD 6001 allows unauthenticated attackers to compromise sensitive database information.

This is a Blind SQL injection vulnerability resulting from improper neutralization of special elements in SQL commands. The vulnerability is exploitable by an unauthenticated attacker, as no login is required to interact with the vulnerable input vectors.

The CVSS score of 9.8 reflects the high potential for total database compromise, including the unauthorized retrieval of sensitive configuration or user data. Given that the vendor has indicated the product is no longer supported, organizations are at significant risk of permanent, unpatched exposure, which could lead to severe reputational damage and data breaches.

Immediate Action: Because the product is unsupported, organizations should prioritize migrating away from the affected SYSGUARD 6001 hardware or software immediately.

Proactive Monitoring: Implement database activity monitoring to detect anomalous query patterns or high volumes of Boolean-based or time-based error responses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to attempt to block malicious payloads targeting the device's interface.

Public Exploit Available: No

The absence of vendor support renders standard patching impossible. Organizations must treat this as a critical business risk and finalize plans to decommission or isolate the affected systems from all network segments immediately to prevent unauthorized access.