A vulnerability has been found in Tiandy Easy7 Integrated Management Platform 7.17.0 and classified as critical. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection.
This vulnerability is identified as CVE-2026-4287. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
