Waybox Pro
Approved changes feed: RSS · Atom
cpe:2.3:h:enelx:waybox_pro:3.0:*:*:*:*:*:*:*
part: h version: 3.0 update: *
| Vendor | Enelx (26ae8f4f-0d6b-5041-b879-3fc3acfc795c) |
|---|---|
| Product | Waybox Pro (be998891-9ddb-5c1a-9c69-b4cbb2c0dd7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29126 |
not_vulnerable | 2026-06-08 06:02:38.752582 |
Insecure loose comparison in Enel X JuiceBox
MEDIUM (4.2)
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.
Published: 2024-11-05T15:28:53.542Z
Updated: 2024-11-05T17:06:44.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29125 |
not_vulnerable | 2026-06-08 06:02:38.752059 |
Heap overflow in CM_main.exe binary in Enel X JuiceBox
CRITICAL (9)
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
Published: 2024-11-05T15:27:22.764Z
Updated: 2024-11-05T17:09:21.562Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29121 |
not_vulnerable | 2026-06-08 06:02:38.750547 |
Exposed TCF agent service in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:23:41.624Z
Updated: 2024-11-05T17:11:16.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29120 |
not_vulnerable | 2026-06-08 06:02:38.749403 |
Unauthorized Remote Command Execution in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:22:22.178Z
Updated: 2024-11-05T19:00:55.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29119 |
not_vulnerable | 2026-06-08 06:02:38.748738 |
Unauthorized SQLite Injection
CRITICAL (9.6)
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.
Published: 2024-11-05T15:20:56.644Z
Updated: 2024-11-05T19:03:26.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29118 |
not_vulnerable | 2026-06-08 06:02:38.747915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29117 |
not_vulnerable | 2026-06-08 06:02:38.747175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29116 |
not_vulnerable | 2026-06-08 06:02:38.744381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29115 |
not_vulnerable | 2026-06-08 06:02:38.743528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.