CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox

Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...

CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox

Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...

CVE-2023-29115

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29115

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29117 Authentication Bypass in JuiceBox Web Manager interface

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...

CVE-2023-29117

CVE-2023-29117 affects Waybox Enel X, where the web management API authentication can be bypassed, granting administrator privileges on the Waybox system. The available connected documents confirm the vulnerability’s existence and describe the impact as administrator-level access via bypassing th...

CVE-2023-29117 Authentication Bypass in JuiceBox Web Manager interface

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...

CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2023-29116

The CVE-2023-29116 entry describes an information-disclosure condition in Enel X Waybox. Affected component: Waybox Enel X web management application. Under certain requests, attackers could obtain details such as Waybox OS version and service configuration information. Impact is information expo...

CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29115

The CVE-2023-29115 entry concerns the Waybox Enel X Web Management application. Multiple connected sources confirm a denial-of-service condition: under certain requests, the web management interface could trigger a DoS event, including a reboot, affecting the Waybox Enel X Web management componen...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox that stems from a lack of access control that allows access to system logs via a web management application...

PT-2024-12195 · Enel X · Waybox Enel X Web Management Application

Name of the Vulnerable Software and Affected Versions: Waybox Enel X Web management application affected versions not specified Description: The issue concerns a denial-of-service condition in the Waybox Enel X Web management application, where a specific request could cause the system to reboot...

PT-2024-12196 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X versions prior to the latest version Description: Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be...

Enel X Waybox 安全漏洞

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a request directed to the web management application that could result in a denial of service...

PT-2024-12197 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X affected versions not specified Description: The Waybox Enel X web management API authentication could be bypassed, providing administrator’s privileges over the Waybox system. This issue affects specific versions of Waybox, but...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in Enel X Waybox version 3.0 that stems from the presence of a type obfuscation vulnerability that allows brute force processing and bypassing authentication under certain conditions...

PT-2024-12201 · Waybox · Waybox

Name of the Vulnerable Software and Affected Versions: Waybox affected versions not specified Description: The Waybox Enel TCF Agent service could be used to gain administrator privileges over the Waybox system. This is a high-severity issue affecting multiple versions of Waybox. Users are advise...

PT-2024-12203 · Waybox · Waybox Wb-2024-002 +2

Name of the Vulnerable Software and Affected Versions: Waybox WB-2024-001 Waybox WB-2024-002 Waybox WB-2024-003 Description: A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Recommendations: For Waybox WB-2024-001, update to the latest firmware to mitigate...