The vulnerability is an SQL injection flaw in Eksagate Electronic Engineering and Computer Industry Trade Inc.'s SYSGUARD 6001. The flaw allows an attacker to inject unescaped SQL commands into queries, enabling blind SQL injection. This can lead to unauthorized data retrieval, modification, or system compromise, potentially exposing confidential information and disrupting the system's operational integrity.

Affected systems are SYSGUARD 6001 versions from 2.0.2 up to and including 6.1.16.0. The product is no longer supported by the vendor, and no official patch or upgrade is available. Users are advised that the vulnerability remains present in all releases within that range.

The CVSS score of 9.8 signifies critical severity. EPSS is not available, so the exploitation likelihood is currently unknown, and the vulnerability is not listed in CISA KEV. Based on the nature of SQL injection, the likely attack vector is remote via the interface that accepts SQL statements. No remediation is provided by the vendor; the lack of support makes mitigation difficult, increasing risk for exposed systems.