Vulnerability Details CVE-2022-22524
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerability to gain full database access, modify users and stop services .
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.5%
CVSS Severity
CVSS v3 Score 9.4
References
Products affected by CVE-2022-22524
-
cpe:2.3:a:gavazziautomation:cpy_car_park_server:*
-
cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-
-
cpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*