Gavazziautomation

11 CVEs across 3 Gavazziautomation products. Browse Gavazziautomation vulnerabilities, severities, and proof-of-concept exploits.

Gavazziautomation products with known CVEs

ProductCVEs
Cpy Car Park Server11
Uwp 3.0 Monitoring Gateway And Controller11
Uwp 3.0 Monitoring Gateway And Controller Firmware11
Gavazziautomation CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-28816Medium6.12022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy is prone to reflected XSS which only affects the Sentil…
CVE-2022-28815Low2.72022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulner…
CVE-2022-28814Critical9.82022-09-28Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability w…
CVE-2022-28813High7.52022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of an SQL-injection to…
CVE-2022-28812Critical9.82022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentia…
CVE-2022-28811Critical9.82022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input valida…
CVE-2022-22526Critical9.82022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows for full access via API.
CVE-2022-22525High7.22022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due…
CVE-2022-22524Critical9.42022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerab…
CVE-2022-22523High7.52022-09-28An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows…
CVE-2022-22522Critical9.82022-09-28In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentia…