Vulnerability Details CVE-2022-28815
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.0%
CVSS Severity
CVSS v3 Score 2.7
References
Products affected by CVE-2022-28815
-
cpe:2.3:a:gavazziautomation:cpy_car_park_server:*
-
cpe:2.3:h:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller:-
-
cpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*