PatchSiren

PatchSiren cyber security CVE debrief

CVE-2022-2177 Kayrasoft CVE debrief

A critical unauthenticated SQL injection vulnerability in Kayrasoft product versions prior to 2 allows remote attackers to execute arbitrary SQL commands without authentication. The vulnerability was published on September 20, 2022, and carries a CVSS 3.1 score of 9.4 (Critical). The issue is resolved in version 2.

Vendor
Kayrasoft
Product
Unknown
CVSS
CRITICAL 9.4
CISA KEV
Not listed in stored evidence
Original CVE published
2022-09-20
Original CVE updated
2026-05-20
Advisory published
2022-09-20
Advisory updated
2026-05-20

Who should care

Organizations running Kayrasoft product version 1 or earlier; database administrators managing Kayrasoft deployments; security teams responsible for application security monitoring; incident response teams in organizations with Turkish government or critical infrastructure connections where USOM advisories apply

Technical summary

The Kayrasoft product contains an unauthenticated SQL injection vulnerability in versions prior to 2. The vulnerability allows remote attackers to manipulate SQL queries without authentication, potentially leading to unauthorized data access, data modification, or database compromise. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) indicates network exploitable, low attack complexity, no privileges required, no user interaction, with high impact to confidentiality and integrity and low availability impact. The vulnerability is classified under CWE-89 (Improper Neutralization of Special Elements in SQL Command).

Defensive priority

critical

Recommended defensive actions

  • Upgrade to Kayrasoft version 2 or later to remediate the SQL injection vulnerability
  • If immediate patching is not possible, restrict network access to the Kayrasoft application to trusted sources only
  • Monitor database query logs for anomalous SQL syntax or unexpected query patterns
  • Review application logs for unauthenticated requests that may indicate exploitation attempts
  • Implement Web Application Firewall (WAF) rules to detect and block common SQL injection payloads
  • Conduct database integrity checks and review for unauthorized data access or modification

Evidence notes

Official CVE record and NVD entry confirm unauthenticated SQL injection in Kayrasoft versions before 2. Turkish National Cyber Security Incident Response Team (USOM) issued advisory TR-22-0630. CPE criteria confirm Kayrasoft version 1 as vulnerable. CWE-89 (SQL Injection) assigned by both USOM and NIST.

Official resources

2022-09-20