NetSight
low2.7

CVE-2022-28815

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulner…

Impact

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

Affected products

VendorProductAffected versions
GavazziautomationCpy Car Park Server
before 2.8.3
GavazziautomationUwp 3.0 Monitoring Gateway And Controller Firmware
before 8.5.0.3

Weakness classification

References