Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Enel X JuiceBox Pro 3.0 22kW Cellular 2.1.1.0_JB3VU096A Clear all filters
TI-2023-13558 CVE-2023-29116 · GHSA-pccx-2485-w69f

PHP Information Disclosure in Enel X JuiceBox

Priority LOW 20

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.0023 Published 2024-11-05 Fixed in 2.1.1.0_JB3VU096A CWE-200
TI-2023-13557 CVE-2023-29115 · GHSA-gg8c-h9qw-qwrh

Denial of Service via Web Management interface in Enel X JuiceBox

Priority LOW 29

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00282 Published 2024-11-05 Fixed in 2.1.1.0_JB3VU096A CWE-284
TI-2023-13556 CVE-2023-29114 · GHSA-m9fp-x7x4-9799

Unauthorized System Log Disclosure in Enel X JuiceBox

Priority LOW 25

System logs could be accessed through web management application due to a lack of access control.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2024-11-05 Fixed in 2.1.1.0_JB3VU096A CWE-200