NetSight
critical9.8

CVE-2022-28814

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability w…

Impact

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device.

Affected products

VendorProductAffected versions
GavazziautomationCpy Car Park Server
before 2.8.3
GavazziautomationUwp 3.0 Monitoring Gateway And Controller Firmware
before 8.5.0.3

Weakness classification

References