Carlo Gavazzi Automation EOS Box vulnerabilities

2 vulnerabilities

Known vulnerabilities in Carlo Gavazzi Automation EOS Box, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2012-6428carlo gavazzi automation · eos-box +1 moreCarlo Gavazzi EOS Box Hard-Coded CredentialsThe Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.EPSS1.53%7.8HighCVE-2012-6427carlo gavazzi automation · eos-box +1 moreCarlo Gavazzi EOS Box SQL InjectionThe Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.EPSS1.33%