Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Carlo Gavazzi EOS Box SQL Injection
Vulnerability Description
The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Carlo Gavazzi EOS-BOX SQL注入漏洞
Vulnerability Description
Carlo Gavazzi EOS-Box是一款嵌入式PC，CEOS-Box Photovoltaic Monitoring System是一款光伏监控系统。EOS-Box一般部署在可再生能源部门。 Carlo Gavazzi EOS-Box固件1.0.0.1080_2.1.10之前版本中存在多个SQL注入漏洞。通过未明向量，远程攻击者利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A