← All credits
Vera Mens from Claroty Research
11 vulnerability records and advisories credit this contributor.
CVE-2022-28813
SQL-injection in Car Park Server 3.0 allows for full database access.
CVE-2022-22522
Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device
CVE-2022-22523
Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass
CVE-2022-22524
SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access
CVE-2022-22525
Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
CVE-2022-22526
Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server
CVE-2022-28811
Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0
CVE-2022-28816
Reflected XSS in Carlo Gavazzi UWP 3.0
CVE-2022-28815
SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy
CVE-2022-28814
Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access