This vulnerability is an SQL Injection (CWE-89) in the Login.asp component of a cloud-based customer service management platform version 1.0.0. It enables a local attacker to execute arbitrary code by exploiting improper input handling in the login functionality. The CVSS 3.1 base score is 5.5, reflecting medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. Confidentiality impact is high, while integrity and availability impacts are not affected. No remediation level or patch information is provided in the available data.

An attacker with local access can exploit this SQL Injection vulnerability to execute arbitrary code, potentially compromising the confidentiality of the system. There is no indication of impact on system integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the Login.asp component. Avoid relying on this component for authentication in untrusted environments.