7.5
CVE-2022-22523
- EPSS 0.64%
- Veröffentlicht 28.09.2022 14:15:10
- Zuletzt bearbeitet 21.11.2024 06:46:57
- Quelle info@cert.vde.com
- CVE-Watchlists
- Unerledigt
LoginCarlo Gavazzi UWP 3.0 WebApp allows for authentication bypass
An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gavazziautomation ≫ Cpy Car Park Server Version < 2.8.3
Gavazziautomation ≫ Uwp 3.0 Monitoring Gateway And Controller Firmware Version < 8.5.0.3
Gavazziautomation ≫ Uwp 3.0 Monitoring Gateway And Controller Firmware Editionedp Version < 8.5.0.3
Gavazziautomation ≫ Uwp 3.0 Monitoring Gateway And Controller Firmware Editionsecurity_enhanced Version < 8.5.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.64% | 0.457 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| info@cert.vde.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
https://cert.vde.com/en/advisories/VDE-2022-029/