PT-2024-12194

Name of the Vulnerable Software and Affected Versions Enel X Waybox versions prior to the fixed version Description The issue is related to a lack of access control in the web management application, allowing system logs to be accessed. An attacker can obtain sensitive information, including Wi-F...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox that stems from a lack of access control that allows access to system logs via a web management application...

Enel X Waybox security vulnerabilities

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a request directed to the web management application that could result in a denial of service...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. The Enel X Waybox has a security vulnerability that originates from an attacker being able to trigger a heap buffer overflow by sending a specific packet to TCP port 7700...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from the fact that the TCF proxy service can be used to gain administrator privileges on the Waybox system...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in Enel X Waybox version 3.0 that stems from the presence of a type obfuscation vulnerability that allows brute force processing and bypassing authentication under certain conditions...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox, which originates from a web management application that can execute arbitrary requests on an internal database via /admin/dbstore.php...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox, which stems from a request directed to the web management application to obtain information such as the Waybox OS version or service configuration details...

Enel X Waybox security vulnerabilities

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can be used to execute arbitrary operating system commands and provide administrator privileges to the Waybox system...

Enel X Waybox security vulnerabilities

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can execute arbitrary requests on an internal database via /admin/versions.php...