Approved changes feed: RSS · Atom

cpe:2.3:a:enel_x:juicebox_pro3.0_22kw_cellular:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnel X (b57b97d9-a0d2-5ab2-a30a-4877b10a25c8)
ProductJuicebox Pro3.0 22Kw Cellular (46c88d11-a709-540c-86af-4c45ebc055d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29125 vulnerable 2026-06-08 06:02:38.751451 Heap overflow in CM_main.exe binary in Enel X JuiceBox
CRITICAL (9)
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700.
Published: 2024-11-05T15:27:22.764Z
Updated: 2024-11-05T17:09:21.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29122 vulnerable 2026-06-08 06:02:38.750853 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
MEDIUM (6.7)
Under certain conditions, access to service libraries is granted to account they should not have access to.
Published: 2024-11-05T15:24:43.416Z
Updated: 2024-11-05T18:58:24.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29121 vulnerable 2026-06-08 06:02:38.750466 Exposed TCF agent service in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:23:41.624Z
Updated: 2024-11-05T17:11:16.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29120 vulnerable 2026-06-08 06:02:38.749204 Unauthorized Remote Command Execution in Enel X Juicebox
CRITICAL (9.6)
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.
Published: 2024-11-05T15:22:22.178Z
Updated: 2024-11-05T19:00:55.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29119 vulnerable 2026-06-08 06:02:38.748391 Unauthorized SQLite Injection
CRITICAL (9.6)
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.
Published: 2024-11-05T15:20:56.644Z
Updated: 2024-11-05T19:03:26.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29118 vulnerable 2026-06-08 06:02:38.747614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29117 vulnerable 2026-06-08 06:02:38.746885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.