CVE-2024-0851: Grup Arge Energy And Control Systems Smartpower

Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection. This issue affects Smartpower: through V24.05.27.

Affected products

• Grup Arge Energy And Control Systems Smartpower: up to and including V24.05.27
• Gruparge Smartpower: up to and including 24.05.27

Published 2024-05-27. Last modified 2026-06-17.