CVE-2022-22525CWE-20

Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection

High · published September 28, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01199 · 67.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-09-28T13:45Z
EPSS history
Timeline
  • 28 SEP 13:45Z
    Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
    cvelistv5