CVE-2012-6428CWE-798

CVE-2012-6428: vulnerability in Carlo Gavazzi Automation EOS-Box

Carlo Gavazzi EOS Box Hard-Coded Credentials

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 1.5%
The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related CVEs — Carlo Gavazzi Automation EOS-Box

In the same product, most dangerous first.