CVE-2022-28815CWE-89

SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy

Low · published September 28, 2022

CVSS v3.1
2.7
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-09-28T13:45Z
EPSS history
Timeline
  • 28 SEP 13:45Z
    SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy
    cvelistv5