Skip to content
Sign in
8.8 High

CVE-2024-43406 LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge…

Description

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.

Affected products and versions

Product Affected versions Fixed in
ekuiper 1.14 earliest → < 1.14.2 1.14.2
ekuiper 1.14 earliest → < 1.14.2 1.14.2

Other CVEs of ekuiper

The 4 CVEs of ekuiper →
CVE-2025-54379 LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge… 8.9 High CVE-2024-52290 LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine 6.3 Medium CVE-2024-52812 LF Edge eKuiper is an internet-of-things data analytics and stream processing engine 5.4 Medium
Track this CVE