CVE-2022-22525: high-severity vulnerability in Carlo Gavazzi CPY Car Park Server
Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 1.2%
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Carlo Gavazzi · CPY Car Park ServerCarlo Gavazzi · UWP 3.0 Monitoring Gateway and ControllerCarlo Gavazzi · UWP 3.0 Monitoring Gateway and Controller – EDP versionCarlo Gavazzi · UWP 3.0 Monitoring Gateway and Controller – Security EnhancedRelated CVEs — Carlo Gavazzi CPY Car Park Server
In the same product, most dangerous first.
CVE-2022-28814CRITICALPath traversal in Carlo Gavazzi UWP 3.0 could lead to full device accessEPSS 1.3%CVE-2022-28811CRITICALPossible command injection in Car Park Server in Carlo Gavazzi UWP3.0EPSS 1.3%CVE-2022-22524CRITICALSQL-injection in Carlo Gavazzi UWP 3.0 allows for full database accessEPSS 1.2%CVE-2022-22522CRITICALHard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the deviceEPSS 1.2%CVE-2022-28812CRITICALUse of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.EPSS 1.0%CVE-2022-28813HIGHSQL-injection in Car Park Server 3.0 allows for full database access.EPSS 1.0%