CVE-2023-29115: falha de média gravidade em Enel X JuiceBox Pro 3.0 22kW Cellular
Denial of Service via Web Management interface in Enel X JuiceBox
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot).
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Enel X · JuiceBox Pro 3.0 22kW CellularCVEs relacionadas — Enel X JuiceBox Pro 3.0 22kW Cellular
No mesmo produto, das mais perigosas para as menos.
CVE-2023-29120CRITICALUnauthorized Remote Command Execution in Enel X JuiceboxEPSS 0.3%CVE-2023-29119CRITICALUnauthorized SQLite InjectionEPSS 0.3%CVE-2023-29118CRITICALUnauthorized SQLite Injection in Enel X JuiceboxEPSS 0.3%CVE-2023-29117HIGHAuthentication Bypass in JuiceBox Web Manager interfaceEPSS 0.3%CVE-2023-29125CRITICALHeap overflow in CM_main.exe binary in Enel X JuiceBoxEPSS 0.3%CVE-2023-29121CRITICALExposed TCF agent service in Enel X JuiceboxEPSS 0.3%