Approved changes feed: RSS · Atom

cpe:2.3:a:enel_x:juicebox_pro_3.0_22kw_cellular:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnel X (b57b97d9-a0d2-5ab2-a30a-4877b10a25c8)
ProductJuicebox Pro 3.0 22Kw Cellular (e51e5ba4-6a84-5ec3-a5f0-bfeeb85bef1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29126 vulnerable 2026-06-08 06:02:38.752415 Insecure loose comparison in Enel X JuiceBox
MEDIUM (4.2)
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.
Published: 2024-11-05T15:28:53.542Z
Updated: 2024-11-05T17:06:44.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29125 vulnerable 2026-06-08 06:02:38.751488 Heap overflow in CM_main.exe binary in Enel X JuiceBox
CRITICAL (9)
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
Published: 2024-11-05T15:27:22.764Z
Updated: 2024-11-05T17:09:21.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29122 vulnerable 2026-06-08 06:02:38.750998 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
MEDIUM (6.7)
Under certain conditions, access to service libraries is granted to account they should not have access to.
Published: 2024-11-05T15:24:43.416Z
Updated: 2024-11-05T18:58:24.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29121 vulnerable 2026-06-08 06:02:38.750501 Exposed TCF agent service in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:23:41.624Z
Updated: 2024-11-05T17:11:16.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29120 vulnerable 2026-06-08 06:02:38.749249 Unauthorized Remote Command Execution in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:22:22.178Z
Updated: 2024-11-05T19:00:55.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29119 vulnerable 2026-06-08 06:02:38.748517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29118 vulnerable 2026-06-08 06:02:38.747761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29117 vulnerable 2026-06-08 06:02:38.747023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29116 vulnerable 2026-06-08 06:02:38.744113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29115 vulnerable 2026-06-08 06:02:38.741514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29114 vulnerable 2026-06-08 06:02:38.741068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.