Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Latest Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware vulnerabilities

CVE-2022-28816 — Reflected XSS in Carlo Gavazzi UWP 3.0 (CVSS 6.1)
CVE-2022-28815 — SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy (CVSS 2.7)
CVE-2022-28814 — Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access (CVSS 9.8)
CVE-2022-28813 — SQL-injection in Car Park Server 3.0 allows for full database access. (CVSS 7.5)
CVE-2022-28812 — Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server. (CVSS 9.8)
CVE-2022-28811 — Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0 (CVSS 9.8)
CVE-2022-22526 — Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server (CVSS 9.8)
CVE-2022-22525 — Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection (CVSS 7.2)
CVE-2022-22524 — SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access (CVSS 9.4)
CVE-2022-22523 — Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass (CVSS 7.5)
CVE-2022-22522 — Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device (CVSS 9.8)