NetSight
high7.2

CVE-2022-22525

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due…

Impact

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function

Affected products

VendorProductAffected versions
GavazziautomationCpy Car Park Server
before 2.8.3
GavazziautomationUwp 3.0 Monitoring Gateway And Controller Firmware
before 8.5.0.3

Weakness classification

References