In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
gavazziautomation cpy car park server |
||
gavazziautomation uwp_3.0_monitoring_gateway_and_controller_firmware |
Vulmon