Vulnerability CVE-2022-28811


Published: 2022-09-28

Description:
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.

Type:

CWE-20

(Improper Input Validation)

 References:
https://cert.vde.com/en/advisories/VDE-2022-029/

Copyright 2026, cxsecurity.com

 

Back to Top