CVE-2022-22523
28.09.2022, 14:15
An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gavazziautomation | cpy_car_park_server | 𝑥 < 2.8.3 |
| gavazziautomation | uwp_3.0_monitoring_gateway_and_controller_firmware | 𝑥 < 8.5.0.3 |
| gavazziautomation | uwp_3.0_monitoring_gateway_and_controller_firmware | 𝑥 < 8.5.0.3 |
| gavazziautomation | uwp_3.0_monitoring_gateway_and_controller_firmware | 𝑥 < 8.5.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration