# Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller.

Every CVE that names Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Reflected XSS in Carlo Gavazzi UWP 3.0](https://agentprime.io/advisories/CVE-2022-28816.md)
  `CVE-2022-28816` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 28 Sept 2022 · Tags: Cross-site scripting (XSS)
- [SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy](https://agentprime.io/advisories/CVE-2022-28815.md)
  `CVE-2022-28815` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 2.7 Low · Not analysed yet · Published 28 Sept 2022 · Tags: SQL injection
- [Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access](https://agentprime.io/advisories/CVE-2022-28814.md)
  `CVE-2022-28814` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Path traversal
- [Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.](https://agentprime.io/advisories/CVE-2022-28812.md)
  `CVE-2022-28812` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Hard-coded credentials
- [Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0](https://agentprime.io/advisories/CVE-2022-28811.md)
  `CVE-2022-28811` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Command injection
- [Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server](https://agentprime.io/advisories/CVE-2022-22526.md)
  `CVE-2022-22526` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Authentication bypass
- [Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection](https://agentprime.io/advisories/CVE-2022-22525.md)
  `CVE-2022-22525` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 7.2 High · Not analysed yet · Published 28 Sept 2022 · Tags: CWE-20
- [SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access](https://agentprime.io/advisories/CVE-2022-22524.md)
  `CVE-2022-22524` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: SQL injection
- [Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass](https://agentprime.io/advisories/CVE-2022-22523.md)
  `CVE-2022-22523` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 7.5 High · Not analysed yet · Published 28 Sept 2022 · Tags: Authentication bypass
- [Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device](https://agentprime.io/advisories/CVE-2022-22522.md)
  `CVE-2022-22522` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Hard-coded credentials
- [SQL-injection in Car Park Server 3.0 allows for full database access.](https://agentprime.io/advisories/CVE-2022-28813.md)
  `CVE-2022-28813` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 7.5 High · Not analysed yet · Published 28 Sept 2022 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=carlo-gavazzi-uwp-3-0-monitoring-gateway-and-controller>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/carlo-gavazzi-uwp-3-0-monitoring-gateway-and-controller/>. Everything for agents: <https://agentprime.io/llms.txt>.