69 matches found
CVE-2023-29126
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication...
CVE-2023-29116
Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...
CVE-2023-29118
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29117
Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...
CVE-2023-29117
Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...
CVE-2023-29119
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29118
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29119
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29116
Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...
CVE-2023-29126
CVE-2023-29126 affects Waybox Enel X web management application (Waybox Enel X / JuiceBox). Reports describe a PHP-type juggling vulnerability that may allow a brute-force process and, under certain conditions, authentication bypass. Concrete details on affected versions are not consistently prov...
CVE-2023-29121 Exposed TCF agent service in Enel X Juicebox
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system...
CVE-2023-29121
CVE-2023-29121 concerns the Waybox Enel TCF Agent service, a component of Enel X Waybox systems. Multiple sources identify that the TCF Agent can be abused to obtain administrator privileges on the Waybox system. The consolidated metrics indicate a CVSS v3.1 base score in the high/critical range ...
CVE-2023-29121 Exposed TCF agent service in Enel X Juicebox
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system...
CVE-2023-29120 Unauthorized Remote Command Execution in Enel X Juicebox
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system...
CVE-2023-29120 Unauthorized Remote Command Execution in Enel X Juicebox
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system...
CVE-2023-29120
CVE-2023-29120 affects the Waybox Enel X web management application. The vulnerability description indicates it could be used to execute arbitrary OS commands and grant administrator privileges on the Waybox system (remote code execution with high impact). The connected documents corroborate a ri...
CVE-2023-29119 Unauthorized SQLite Injection
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29119
CVE-2023-29119 affects Waybox Enel X web management application. Reported vulnerability allows arbitrary requests on the internal database via the/web path /admin/dbstore.php, as described in multiple sources (NVD entry, Red Hat advisory, CVE list). Potential impact includes confidentiality, inte...