← CVE Intelligence

CVE-2022-22526

Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server PUBLISHED

Description (CNA)

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows for full access via API.

Affected (CNA)

Vendor / productVersions
Carlo Gavazzi / UWP 3.0 Monitoring Gateway and Controlleraffected 8 before 8.5.0.3
Carlo Gavazzi / UWP 3.0 Monitoring Gateway and Controller – Security Enhancedaffected 8 before 8.5.0.3
Carlo Gavazzi / UWP 3.0 Monitoring Gateway and Controller – EDP versionaffected 8 before 8.5.0.3
Carlo Gavazzi / CPY Car Park Serveraffected 2 before 2.8.3

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.