CVE-2012-6427CWE-89

CVE-2012-6427: vulnerability in Carlo Gavazzi Automation EOS-Box

Carlo Gavazzi EOS Box SQL Injection

Published · Updated

Follow this CVE+ Monitor EOS-Box

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.3%
The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.
AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected products
Carlo Gavazzi Automation · EOS-Box
Related CVEs — Carlo Gavazzi Automation EOS-Box

In the same product, most dangerous first.

CVE-2012-6428—Carlo Gavazzi EOS Box Hard-Coded CredentialsEPSS 1.5%