CVE-2023-29117 Authentication Bypass in JuiceBox Web Manager interface

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...

CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...

CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29115

The CVE-2023-29115 entry concerns the Waybox Enel X Web Management application. Multiple connected sources confirm a denial-of-service condition: under certain requests, the web management interface could trigger a DoS event, including a reboot, affecting the Waybox Enel X Web management componen...

CVE-2023-29114 Unauthorized System Log Disclosure in Enel X JuiceBox

System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and credentials. • IPSEC credentials...

PT-2024-12195 · Enel X · Waybox Enel X Web Management Application

Name of the Vulnerable Software and Affected Versions: Waybox Enel X Web management application affected versions not specified Description: The issue concerns a denial-of-service condition in the Waybox Enel X Web management application, where a specific request could cause the system to reboot...

Enel X Waybox 安全漏洞

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can be used to execute arbitrary operating system commands and provide administrator privileges to the Waybox system...

PT-2024-12196 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X versions prior to the latest version Description: Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be...

PT-2024-12197 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X affected versions not specified Description: The Waybox Enel X web management API authentication could be bypassed, providing administrator’s privileges over the Waybox system. This issue affects specific versions of Waybox, but...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox that stems from a lack of access control that allows access to system logs via a web management application...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox Pro version 3.0, which stems from the ability to bypass Web Management API authentication and provide administrator rights to the Waybox system...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox, which originates from a web management application that can execute arbitrary requests on an internal database via /admin/dbstore.php...

PT-2024-12204 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X affected versions not specified Description: The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. This...

Enel X Waybox 安全漏洞

Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a request directed to the web management application that could result in a denial of service...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox, which stems from a request directed to the web management application to obtain information such as the Waybox OS version or service configuration details...

PT-2024-34618 · Altai · Altai Ix500 Indoor 22 802.11Ac Wave 2 Ap

Name of the Vulnerable Software and Affected Versions: Altai X500 Indoor 22 802.11ac Wave 2 AP affected versions not specified Description: The issue concerns a weak password leakage in the web management of the Altai X500 Indoor 22 802.11ac Wave 2 AP. This weakness may lead to unauthorized acces...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43208)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a cross-site scripting vulnerability that originates from the Web management interface not properly validating user-supplied input, which can...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43203)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...