Read the docs

Carlo Gavazzi Automation

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Carlo Gavazzi Automation records in CISA KEV

No Carlo Gavazzi Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Eos-box Photovoltaic Monitoring System Firmware · all components

Priority MEDIUM 46

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.01533 Published 2012-12-23 Fixed in 1.0.0.1080_2.1.10 CWE-798
TI-2012-05174 CVE-2012-6427 · GHSA-7qc4-45cg-h6f3

Carlo Gavazzi EOS Box SQL Injection

Priority LOW 37

The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01333 Published 2012-12-23 Fixed in 1.0.0.1080_2.1.10 CWE-89
Open these records in search →