CVE-2012-6428 Carlo Gavazzi EOS Box Hard-Coded Credentials
HighCVSS 10.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Carlo Gavazzi
EOS-Box
stores hard-coded passwords in the PHP file of
the device. By using the hard-coded passwords, attackers can log into
the device with administrative privileges. This could allow the attacker
to have unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| carlosgavazzi eos-box photovoltaic monitoring system firmware | <= 1.0.0 | No fix listed |
| carlosgavazzi eos-box photovoltaic monitoring system | All versions | No fix listed |
| Carlo Gavazzi Automation EOS-Box | < 1.0.0.1080_2.1.10 | 1.0.0.1080_2.1.10 |
References
- www.cisa.gov
- www.us-cert.gov us-government-resource