PT-2024-12200
CVE-2023-29120
·
Published
2024-11-05
·
Updated
2024-11-08
Description by
CVSS 3.1
9.6
CriticalMetricsAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Waybox Enel X web management application (affected versions not specified)
Description
The Waybox Enel X web management application has a flaw that allows users to execute arbitrary OS commands, providing administrator’s privileges over the Waybox system. This issue affects specific versions of WAYBOX-2023-001.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾