CVE-2023-29121

Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.

Score

CVSS 3.1 9.6 Critical

Status

Analyzed - cve@asrg.io

Published

2024-11-05

Last modified

2024-11-05

Weaknesses

CWE-284

Affected products

• Juicebox Pro3.0 22kw Cellular (Enel X)
• Juicebox Pro 3.0 22kw Cellular (Enel X)
• Waybox Pro Firmware (Enelx)

References

• https://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Securit…