CVE-2022-28815

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

Score

CVSS 3.1 2.7 Low

Status

Modified - info@cert.vde.com

Published

2022-09-28

Last modified

2025-05-20

Weaknesses

CWE-89

Affected products

• Cpy Car Park Server (Carlo Gavazzi)
• Uwp 3.0 Monitoring Gateway And Controller (Carlo Gavazzi)
• Uwp 3.0 Monitoring Gateway And Controller Edp Version (Carlo Gavazzi)
• Uwp 3.0 Monitoring Gateway And Controller Security Enhanced (Carlo Gavazzi)
• Cpy Car Park Server (Gavazziautomation)
• Uwp 3.0 Monitoring Gateway And Controller Firmware (Gavazziautomation)

References

• https://cert.vde.com/en/advisories/VDE-2022-029/