This vulnerability involves SQL Injection in Genetec Security Center's Access Manager role, where special elements in SQL commands are not properly neutralized. The affected versions include all releases up to 5.9.5.11, 5.10.4.31, 5.11.3.28, and certain ranges in 5.12.x and 5.13.x series. The CVSS 3.1 score is 6.6, indicating a medium severity with high impact on confidentiality, integrity, and availability, but requiring high privileges and high attack complexity. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker with Access Manager privileges to execute arbitrary SQL commands, potentially leading to unauthorized disclosure, modification, or deletion of data within the Genetec Security Center database. This could compromise system confidentiality, integrity, and availability. However, exploitation requires high privileges and complexity, limiting the ease of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Access Manager role assignments to trusted personnel only and monitor for unusual database activity related to SQL commands. Avoid exposing the affected versions to untrusted networks where possible.