Description
The Carlo Gavazzi
EOS-Box
stores hard-coded passwords in the PHP file of
the device. By using the hard-coded passwords, attackers can log into
the device with administrative privileges. This could allow the attacker
to have unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Carlo Gavazzi Automation | EOS-Box | < 1.0.0.1080_2.1.10 | 1.0.0.1080_2.1.10 |
Advisories 1
- ICSA-12-354-02 Carlo Gavazzi EOS Box Multiple Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025