Description
Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Enel X | JuiceBox Pro 3.0 22kW Cellular | ≤ 2.1.1.0_JB3VU096A | — |
High · 8.8
CVE-2023-29117
EUVD-2023-32720GHSA-5wr9-cjhq-wwg7
Authentication Bypass in JuiceBox Web Manager interface
Published Nov 5, 2024 · Updated Nov 5, 2024 · Assigned by ASRG