agentprime: carlo-gavazzi-cpy-car-park-serverEvery new CVE for carlo-gavazzi-cpy-car-park-server.https://agentprime.io/CVE-2022-28816: Reflected XSS in Carlo Gavazzi UWP 3.0https://agentprime.io/advisories/CVE-2022-28816/https://agentprime.io/advisories/CVE-2022-28816/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:37 GMTCVECVE-2022-28815: SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxyhttps://agentprime.io/advisories/CVE-2022-28815/https://agentprime.io/advisories/CVE-2022-28815/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:36 GMTCVECVE-2022-28814: Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device accesshttps://agentprime.io/advisories/CVE-2022-28814/https://agentprime.io/advisories/CVE-2022-28814/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:35 GMTCVEcriticalCVE-2022-28812: Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.https://agentprime.io/advisories/CVE-2022-28812/https://agentprime.io/advisories/CVE-2022-28812/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:33 GMTCVEcriticalCVE-2022-28811: Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0https://agentprime.io/advisories/CVE-2022-28811/https://agentprime.io/advisories/CVE-2022-28811/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:32 GMTCVEcriticalCVE-2022-22526: Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Serverhttps://agentprime.io/advisories/CVE-2022-22526/https://agentprime.io/advisories/CVE-2022-22526/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:31 GMTCVEcriticalCVE-2022-22525: Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injectionhttps://agentprime.io/advisories/CVE-2022-22525/https://agentprime.io/advisories/CVE-2022-22525/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:30 GMTCVECVE-2022-22524: SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database accesshttps://agentprime.io/advisories/CVE-2022-22524/https://agentprime.io/advisories/CVE-2022-22524/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:30 GMTCVEcriticalCVE-2022-22523: Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypasshttps://agentprime.io/advisories/CVE-2022-22523/https://agentprime.io/advisories/CVE-2022-22523/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:29 GMTCVECVE-2022-22522: Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the devicehttps://agentprime.io/advisories/CVE-2022-22522/https://agentprime.io/advisories/CVE-2022-22522/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 13:45:28 GMTCVEcriticalCVE-2022-28813: SQL-injection in Car Park Server 3.0 allows for full database access.https://agentprime.io/advisories/CVE-2022-28813/https://agentprime.io/advisories/CVE-2022-28813/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Sep 2022 00:00:00 GMTCVE