Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.9%
probabilidade de exploração
0.9%top 41% das CVEs
exploração observada
nãonenhuma fonte reporta
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H