Sql injection

2022-09-2814:15:00

PRIOn knowledge base

www.prio-n.com

security vulnerability

sql injection

carlo gavazzi uwp3.0

cpy car park server

sentilo proxy server

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

CPENameOperatorVersion
cpy_car_park_serverlt2.8.3
uwp_3.0_monitoring_gateway_and_controller_firmwarelt8.5.0.3
uwp_3.0_monitoring_gateway_and_controller_firmwarelt8.5.0.3
uwp_3.0_monitoring_gateway_and_controller_firmwarelt8.5.0.3

Name	Operator	Version
cpy_car_park_server	lt	2.8.3
uwp_3.0_monitoring_gateway_and_controller_firmware	lt	8.5.0.3
uwp_3.0_monitoring_gateway_and_controller_firmware	lt	8.5.0.3
uwp_3.0_monitoring_gateway_and_controller_firmware	lt	8.5.0.3

References

cert.vde.com/en/advisories/VDE-2022-029/