CVE-2023-29121

Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:enelx:waybox_pro:3.0:*:*:*:*:*:*:*

History

08 Nov 2024, 16:09

Type Values Removed Values Added
CPE cpe:2.3:h:enelx:waybox_pro:3.0:*:*:*:*:*:*:*
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 9.6
v2 : unknown
v3 : 8.8
CWE NVD-CWE-Other
First Time Enelx waybox Pro Firmware
Enelx waybox Pro
Enelx
References () https://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf - () https://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf - Vendor Advisory

06 Nov 2024, 18:17

Type Values Removed Values Added
Summary
  • (es) El servicio Waybox Enel TCF Agent se puede utilizar para obtener privilegios de administrador en el sistema Waybox.

05 Nov 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 16:15

Updated : 2024-11-08 16:09


NVD link : CVE-2023-29121

Mitre link : CVE-2023-29121

CVE.ORG link : CVE-2023-29121


JSON object : View

Products Affected

enelx

  • waybox_pro_firmware
  • waybox_pro
CWE
NVD-CWE-Other CWE-284

Improper Access Control