NetSight
critical9.8

CVE-2022-22522

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentia…

Impact

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device.

Affected products

VendorProductAffected versions
GavazziautomationCpy Car Park Server
before 2.8.3
GavazziautomationUwp 3.0 Monitoring Gateway And Controller Firmware
before 8.5.0.3

Weakness classification

References