CVE-2023-29116 | THREATINT

Description

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained.

Reserved 2023-03-31 | Published 2024-11-05 | Updated 2024-11-05 | Assigner ASRG

MEDIUM: 4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Product status

Default status

unaffected

Any version before 2.1.1.0_JB3VU096A

affected

Credits

Abdellah Benotsmane (PCAutomotive) finder

References

support-emobility.enelx.com/...ecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf

cve.org (CVE-2023-29116)

nvd.nist.gov (CVE-2023-29116)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.