Description
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Carlo Gavazzi | UWP 3.0 Monitoring Gateway and Controller | 8 – < 8.5.0.3 | 8.5.0.3 |
| Carlo Gavazzi | UWP 3.0 Monitoring Gateway and Controller – Security Enhanced | 8 – < 8.5.0.3 | 8.5.0.3 |
| Carlo Gavazzi | UWP 3.0 Monitoring Gateway and Controller – EDP version | 8 – < 8.5.0.3 | 8.5.0.3 |
| Carlo Gavazzi | CPY Car Park Server | 2 – < 2.8.3 | 2.8.3 |