This vulnerability (CVE-2024-12913) involves improper neutralization of special elements used in SQL commands within the Azora Wireless Network Management product by Megatek Communication System. It is classified under CWE-89 (SQL Injection). The flaw allows an attacker with local access and low privileges to execute crafted SQL commands, potentially leading to complete compromise of the affected system's database. The vulnerability affects all versions through 20250916. The vendor has not provided information regarding patch availability or mitigation status. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with limited privileges to execute arbitrary SQL commands, leading to full compromise of the database, including unauthorized data disclosure, modification, or deletion, and potentially disrupting system availability. The high CVSS score (8.8) reflects the critical impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not communicated a fix, users should monitor official Megatek advisories for updates. Until a patch is available, restrict access to the affected system to trusted users only and apply any recommended workarounds from the vendor if provided.