PT-2024-12201 · Waybox · Waybox

Name of the Vulnerable Software and Affected Versions: Waybox affected versions not specified Description: The Waybox Enel TCF Agent service could be used to gain administrator privileges over the Waybox system. This is a high-severity issue affecting multiple versions of Waybox. Users are advise...

PT-2024-12194

Name of the Vulnerable Software and Affected Versions Enel X Waybox versions prior to the fixed version Description The issue is related to a lack of access control in the web management application, allowing system logs to be accessed. An attacker can obtain sensitive information, including Wi-F...

CVE-2023-29121: Improper Access Control

Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system...

CVE-2023-29119: Improper Neutralization of Special Elements used in an SQL Command

Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...

CVE-2023-29118: Improper Neutralization of Special Elements used in an SQL Command

Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...

PT-2024-12197 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X affected versions not specified Description: The Waybox Enel X web management API authentication could be bypassed, providing administrator’s privileges over the Waybox system. This issue affects specific versions of Waybox, but...

PT-2024-12200

Name of the Vulnerable Software and Affected Versions Waybox Enel X web management application affected versions not specified Description The Waybox Enel X web management application has a flaw that allows users to execute arbitrary OS commands, providing administrator’s privileges over the Wayb...

Enel X Waybox 安全漏洞

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can be used to execute arbitrary operating system commands and provide administrator privileges to the Waybox system...

PT-2024-12203 · Waybox · Waybox Wb-2024-002 +2

Name of the Vulnerable Software and Affected Versions: Waybox WB-2024-001 Waybox WB-2024-002 Waybox WB-2024-003 Description: A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Recommendations: For Waybox WB-2024-001, update to the latest firmware to mitigate...

CVE-2023-29115: Improper Access Control

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox that stems from a lack of access control that allows access to system logs via a web management application...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can execute arbitrary requests on an internal database via /admin/versions.php...

CVE-2023-29116: Exposure of Sensitive Information to an Unauthorized Actor

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2023-29126: Improper Validation of Specified Type of Input

The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication...

PT-2024-12195 · Enel X · Waybox Enel X Web Management Application

Name of the Vulnerable Software and Affected Versions: Waybox Enel X Web management application affected versions not specified Description: The issue concerns a denial-of-service condition in the Waybox Enel X Web management application, where a specific request could cause the system to reboot...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. The Enel X Waybox has a security vulnerability that originates from an attacker being able to trigger a heap buffer overflow by sending a specific packet to TCP port 7700...

CVE-2023-29117: Improper Authentication

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...

PT-2024-12196 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X versions prior to the latest version Description: Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox, which originates from a web management application that can execute arbitrary requests on an internal database via /admin/dbstore.php...

PT-2024-12202

Name of the Vulnerable Software and Affected Versions Waybox affected versions not specified Description Under certain conditions, access to service libraries is granted to accounts that should not have access to them. This issue allows unauthorized access to service libraries. Recommendations At...