Gavazzi Automation UWP 3.0 Monitoring Gateway And Controller - Security Enhanced Edition
Approved changes feed: RSS · Atom
cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-:*:security_enhanced:*:*:*:*:*
part: h version: - update: *
| Vendor | Gavazziautomation (33273c3c-e1f2-5c5d-8caa-1b8d533ccbc8) |
|---|---|
| Product | Uwp 3.0 Monitoring Gateway And Controller (192dbf6c-228d-592e-a818-a365a60b9976) |
| Edition | security_enhanced |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-28816 |
not_vulnerable | 2026-06-08 05:42:45.883115 |
Reflected XSS in Carlo Gavazzi UWP 3.0
MEDIUM (6.1)
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy is prone to reflected XSS which only affects the Sentilo service.
Published: 2022-09-28T13:45:37.000Z
Updated: 2025-05-20T20:36:50.107Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28815 |
not_vulnerable | 2026-06-08 05:42:45.882280 |
SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy
LOW (2.7)
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.
Published: 2022-09-28T13:45:36.000Z
Updated: 2025-05-20T20:36:22.425Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28814 |
not_vulnerable | 2026-06-08 05:42:45.881087 |
Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access
CRITICAL (9.8)
Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device.
Published: 2022-09-28T13:45:35.000Z
Updated: 2025-05-20T20:35:41.068Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28813 |
not_vulnerable | 2026-06-08 05:42:45.880058 |
SQL-injection in Car Park Server 3.0 allows for full database access.
HIGH (7.5)
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of an SQL-injection to gain access to a volatile temporary database with the current states of the device.
Published: 2022-09-28T00:00:00.000Z
Updated: 2025-05-21T14:58:20.935Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28812 |
not_vulnerable | 2026-06-08 05:42:45.879028 |
Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.
CRITICAL (9.8)
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain SuperUser access to the device.
Published: 2022-09-28T13:45:33.000Z
Updated: 2025-05-20T20:35:08.654Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28811 |
not_vulnerable | 2026-06-08 05:42:45.877641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22526 |
not_vulnerable | 2026-06-08 05:40:54.125174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22525 |
not_vulnerable | 2026-06-08 05:40:54.124423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22524 |
not_vulnerable | 2026-06-08 05:40:54.123501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22523 |
not_vulnerable | 2026-06-08 05:40:54.122221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22522 |
not_vulnerable | 2026-06-08 05:40:54.121052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.