A critical SQL injection vulnerability in Crocus allows unauthenticated remote attackers to achieve full database compromise and escalate privileges.

The application is susceptible to SQL injection via the DeviceInfoMapper.xml file. This allows an unauthenticated remote attacker to inject arbitrary SQL statements, leading to unauthorized database interaction and privilege escalation.

With a CVSS score of 9.8, this vulnerability is critical. Successful exploitation provides an attacker with complete control over the underlying database, enabling them to steal sensitive information, modify data, or gain administrative access to the application, resulting in a total compromise of the affected system.

Immediate Action: Upgrade Crocus to a version greater than 1.3.44 to patch the vulnerable mapper file.

Proactive Monitoring: Monitor database query logs for unusual or malformed SQL statements that deviate from standard application behavior.

Compensating Controls: Use a Web Application Firewall (WAF) to filter incoming requests for common SQL injection patterns and sanitize input before it reaches the application backend.

Public Exploit Available: Yes, a public proof-of-concept exists.

Given the critical severity of this vulnerability, immediate patching is required. Organizations should treat this as a high-priority remediation task to avoid total database compromise and unauthorized administrative access.