In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
References
| Link | Resource |
|---|---|
| https://cert.vde.com/en/advisories/VDE-2022-029/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
30 Sep 2022, 02:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-:*:security_enhanced:*:*:*:*:* cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-:*:edp:*:*:*:*:* cpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*:*:security_enhanced:*:*:*:*:* cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-:*:*:*:*:*:*:* cpe:2.3:a:gavazziautomation:cpy_car_park_server:*:*:*:*:*:*:*:* cpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*:*:edp:*:*:*:*:* |
|
| References | (CONFIRM) https://cert.vde.com/en/advisories/VDE-2022-029/ - Third Party Advisory | |
| First Time |
Gavazziautomation uwp 3.0 Monitoring Gateway And Controller Firmware
Gavazziautomation cpy Car Park Server Gavazziautomation uwp 3.0 Monitoring Gateway And Controller Gavazziautomation |
28 Sep 2022, 14:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-28 14:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-22525
Mitre link : CVE-2022-22525
CVE.ORG link : CVE-2022-22525
JSON object : View
Products Affected
gavazziautomation
- cpy_car_park_server
- uwp_3.0_monitoring_gateway_and_controller
- uwp_3.0_monitoring_gateway_and_controller_firmware
CWE
CWE-20
Improper Input Validation