Waybox Pro Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Enelx (26ae8f4f-0d6b-5041-b879-3fc3acfc795c) |
|---|---|
| Product | Waybox Pro Firmware (1744d7bd-d5ee-5ede-8d26-4cd055a4f1f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29126 |
vulnerable | 2026-06-08 06:02:38.752555 |
Insecure loose comparison in Enel X JuiceBox
MEDIUM (4.2)
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.
Published: 2024-11-05T15:28:53.542Z
Updated: 2024-11-05T17:06:44.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29125 |
vulnerable | 2026-06-08 06:02:38.751900 |
Heap overflow in CM_main.exe binary in Enel X JuiceBox
CRITICAL (9)
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
Published: 2024-11-05T15:27:22.764Z
Updated: 2024-11-05T17:09:21.562Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29121 |
vulnerable | 2026-06-08 06:02:38.750525 |
Exposed TCF agent service in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:23:41.624Z
Updated: 2024-11-05T17:11:16.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29120 |
vulnerable | 2026-06-08 06:02:38.749275 |
Unauthorized Remote Command Execution in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:22:22.178Z
Updated: 2024-11-05T19:00:55.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29119 |
vulnerable | 2026-06-08 06:02:38.748635 |
Unauthorized SQLite Injection
CRITICAL (9.6)
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.
Published: 2024-11-05T15:20:56.644Z
Updated: 2024-11-05T19:03:26.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29118 |
vulnerable | 2026-06-08 06:02:38.747787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29117 |
vulnerable | 2026-06-08 06:02:38.747146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29116 |
vulnerable | 2026-06-08 06:02:38.744162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29115 |
vulnerable | 2026-06-08 06:02:38.742757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.