critical9.6

CVE-2023-29120

Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.

Impact

Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.

Affected products

Vendor	Product	Affected versions
Enelx	Waybox Pro Firmware	before 2.1.1.0_jb3vu096a

Weakness classification

CWE-78

References

NVD record
CVE.org record
https://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf