CERT24Critical Vulnerabilities in Toptech TMS7 and TopHATLoading data…
CERT24Threat Observatory
Period

Critical Vulnerabilities in Toptech TMS7 and TopHAT

On September 29, CISA issued an advisory concerning version 7.6.3 of the TMS7 and TopHAT management systems for oil-loading terminals. The issues include unauthenticated database-table export, SQL injection, and the ability to upload PHP files with subsequent code execution. Fixes are included in version 7.8. No public exploitation has been recorded.

← Back to intelligence

Critical Vulnerabilities in Toptech TMS7 and TopHAT

On September 29, CISA issued an advisory concerning version 7.6.3 of the TMS7 and TopHAT management systems for oil-loading terminals. The issues include unauthenticated database-table export, SQL injection, and the ability to upload PHP files with subsequent code execution. Fixes are included in version 7.8. No public exploitation has been recorded.