A critical SQL injection vulnerability in Infor SD.NET RIM allows unauthenticated attackers to execute arbitrary database commands, posing a significant risk of data compromise.

The application is susceptible to SQL injection through the 'idtyp' and 'idgremium' POST parameters on the /vorlagen/ endpoint. An unauthenticated attacker can supply malicious SQL statements to these parameters, which are then executed by the backend database.

Successful exploitation grants an attacker the ability to interact directly with the underlying database without requiring authentication. This can lead to unauthorized data exfiltration, the modification or deletion of sensitive records, and potential disruption of critical business services. Given the CVSS score of 8.2, this vulnerability represents a high risk to the confidentiality and integrity of the organization's data.

Immediate Action: Upgrade SD.NET RIM to version 4.7.3c or higher immediately to apply the vendor-supplied security patch.

Proactive Monitoring: Monitor web server logs for suspicious POST requests targeting the /vorlagen/ endpoint, particularly those containing unexpected SQL syntax or non-standard characters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns in HTTP request bodies.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in Exploit-DB (EDB-ID 47589).

The presence of a public proof-of-concept combined with the ease of exploitation requires immediate attention. Security teams should prioritize patching affected instances to version 4.7.3c to eliminate this injection vector. If patching is not immediately feasible, ensure that network-level controls and WAF signatures are active to mitigate the risk of unauthorized database access.