CVEvulnerability

CVE-2012-6428

10.0 HIGH Published 2012-12-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255, CWE-798

Description

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Affected configurations

• carlosgavazzi eos-box photovoltaic monitoring system firmware (<= 1.0.0) • carlosgavazzi eos-box photovoltaic monitoring system

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References