CVE-2023-29120 | THREATINT

Description

Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.

Reserved 2023-03-31 | Published 2024-11-05 | Updated 2024-11-05 | Assigner ASRG

CRITICAL: 9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

Any version

affected

Credits

Danila Parnishchev (PCAutomotive) finder

Anna Breeva (PCAutomotive) finder

References

support-emobility.enelx.com/...urity-Bulletin-06-2024-V1.pdf

cve.org (CVE-2023-29120)

nvd.nist.gov (CVE-2023-29120)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.