CVE-2012-6427CWE-89

Carlo Gavazzi EOS Box SQL Injection

High · published December 23, 2012

CVSS v2.0
7.8
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The Carlo Gavazzi

EOS-Box

does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01333 · 70.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2012-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Carlo Gavazzi EOS Box SQL Injection
    cvelistv5