EUVD-2022-33253

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

SQL injection vulnerability found in Carlo Gavazzi UWP3.0 and CPY Car Park Server affecting Sentilo Proxy.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-28815	28 Sep 202218:34	–	circl
CNNVD	Carlo Gavazzi UWP SQL注入漏洞	28 Sep 202200:00	–	cnnvd
CVE	CVE-2022-28815	28 Sep 202213:45	–	cve
Cvelist	CVE-2022-28815 SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy	28 Sep 202213:45	–	cvelist
NVD	CVE-2022-28815	28 Sep 202214:15	–	nvd
Prion	Sql injection	28 Sep 202214:15	–	prion
RedhatCVE	CVE-2022-28815	22 May 202522:12	–	redhatcve
Vulnrichment	CVE-2022-28815 SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy	28 Sep 202213:45	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "8cd8f235-b368-3d99-9579-d6c7ccd564be",
        "vendor": {
          "name": "Carlo Gavazzi"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1536cd0e-9cfa-3257-903d-6047b06ae1c0",
        "product": {
          "name": "UWP 3.0 Monitoring Gateway and Controller – Security Enhanced"
        },
        "product_version": "8 <8.5.0.3"
      },
      {
        "id": "a48939d0-87c9-35f9-a257-0f459e161b67",
        "product": {
          "name": "UWP 3.0 Monitoring Gateway and Controller"
        },
        "product_version": "8 <8.5.0.3"
      },
      {
        "id": "c0b0c746-3fac-3654-ba70-0d09d34fb62d",
        "product": {
          "name": "CPY Car Park Server"
        },
        "product_version": "2 <2.8.3"
      },
      {
        "id": "c9304393-b3e1-33e3-bc1c-17ff6a0825af",
        "product": {
          "name": "UWP 3.0 Monitoring Gateway and Controller – EDP version"
        },
        "product_version": "8 <8.5.0.3"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-029/

03 Oct 2025 20:07Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.12.7

EPSS0.00202

SSVC