Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

UWP 3.0 Monitoring Gateway and Controller — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in UWP 3.0 Monitoring Gateway and Controller, with AI-generated Chinese analysis, references, and POCs.

Vendor: Carlo Gavazzi

CVE IDTitleCVSSSeverityPaused
CVE-2022-28816 Reflected XSS in Carlo Gavazzi UWP 3.0 CWE-79 6.1 Medium2022-09-28
CVE-2022-28815 SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy CWE-89 2.7 Low2022-09-28
CVE-2022-28814 Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access CWE-23 9.8 Critical2022-09-28
CVE-2022-28812 Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server. CWE-798 9.8 Critical2022-09-28
CVE-2022-28811 Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0 CWE-78 9.8 Critical2022-09-28
CVE-2022-22526 Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server CWE-306 9.8 Critical2022-09-28
CVE-2022-22524 SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access CWE-89 9.4 Critical2022-09-28
CVE-2022-22525 Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection CWE-20 7.2 High2022-09-28
CVE-2022-22523 Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass CWE-287 7.5 High2022-09-28
CVE-2022-22522 Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device CWE-798 9.8 Critical2022-09-28
CVE-2022-28813 SQL-injection in Car Park Server 3.0 allows for full database access. CWE-89 7.5 High2022-09-28

All 11 known CVE vulnerabilities affecting UWP 3.0 Monitoring Gateway and Controller with full Chinese analysis, references, and POCs where available.