CVE-2012-6427

2022-10-0316:15:29

CWE-89

[email protected]

web.nvd.nist.gov

cve-2012-6427

sql injection

carlo gavazzi eos-box

firmware

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.0%

JSON

Multiple SQL injection vulnerabilities in Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a similar issue to CVE-2012-5861.

Affected configurations

NVD

Node

carlosgavazzieos-box_photovoltaic_monitoring_system_firmwareRange≤1.0.0

AND

carlosgavazzieos-box_photovoltaic_monitoring_systemMatch-

CPENameOperatorVersion
carlosgavazzi:eos-box_photovoltaic_monitoring_system_firmwarecarlosgavazzi eos-box photovoltaic monitoring system firmwarele1.0.0
carlosgavazzi:eos-box_photovoltaic_monitoring_systemcarlosgavazzi eos-box photovoltaic monitoring systemeq-

CPE	Name	Operator	Version
carlosgavazzi:eos-box_photovoltaic_monitoring_system_firmware	carlosgavazzi eos-box photovoltaic monitoring system firmware	le	1.0.0
carlosgavazzi:eos-box_photovoltaic_monitoring_system	carlosgavazzi eos-box photovoltaic monitoring system	eq	-