CVE-2022-22523CWE-287

Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass

High · published September 28, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00883 · 58.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-09-28T13:45Z
EPSS history
Timeline
  • 28 SEP 13:45Z
    Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass
    cvelistv5