The vulnerability stems from insufficient sanitization of data received by the GetGridData endpoint in the PROCON‑WEB SCADA application. Attackers can craft requests that inject malicious SQL statements, enabling them to read, modify, or delete database contents. This flaw is a classic instance of CWE‑89, where unvalidated input feeds directly into a database query.

Affected systems are installations of Weidmueller's PROCON‑WEB SCADA platform. No explicit version range is disclosed in the advisory. Administrators should review their live deployments of this product for the presence of the unpatched GetGridData endpoint.

The CVSS score of 9.3 indicates critical severity, and the EPSS score of less than 1% means that, although exploitation is theoretically possible, the likelihood of real‑world attacks at this time is low. The vulnerability is not listed in CISA's KEV database. If exposed, an unauthenticated attacker could target the endpoint over the network; the attack vector is likely via HTTP GET requests lacking authentication. Successful exploitation would provide full database access, compromising confidentiality and integrity.