CVE-2022-28813

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of an SQL-injection to gain access to a volatile temporary database with the current states of the device...

CVE-2022-28813 SQL-injection in Car Park Server 3.0 allows for full database access.

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of an SQL-injection to gain access to a volatile temporary database with the current states of the device...

CVE-2022-28813

CVE-2022-28813 affects Carlo Gavazzi UWP3.0 and CPY Car Park Server 2.8.3. A remote, unauthenticated SQL injection could access a volatile temporary database containing current device states. CVSSv3.1: 7.5 (HIGH); Attack Vector: NETWORK; Attack Complexity: LOW; Privileges Required: NONE; User Int...