Advisories · Technology
Enel X JuiceBox Pro 3.0 22kW Cellular.
Every CVE that names Enel X JuiceBox Pro 3.0 22kW Cellular among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.2 Medium
Insecure loose comparison in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- CWE-1287
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap overflow in CM_main.exe binary in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Memory corruption
- CVSS 6.7 Medium
Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- CWE-708
- CVSS 9.6 CriticalCritical · CVSS 9+
Exposed TCF agent service in Enel X Juicebox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Broken access control
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthorized Remote Command Execution in Enel X Juicebox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Command injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthorized SQLite Injection
- Enel X JuiceBox Pro 3.0 22kW Cellular
- SQL injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthorized SQLite Injection in Enel X Juicebox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- SQL injection
- CVSS 8.8 High
Authentication Bypass in JuiceBox Web Manager interface
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Authentication bypass
- CVSS 4.3 Medium
PHP Information Disclosure in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Information disclosure
- CVSS 6.5 Medium
Denial of Service via Web Management interface in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Broken access control
- CVSS 5.7 Medium
Unauthorized System Log Disclosure in Enel X JuiceBox
- Enel X JuiceBox Pro 3.0 22kW Cellular
- Information disclosure