Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2023-29120

Unauthorized Remote Command Execution in Enel X Juicebox

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASRG

Description

Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Enel X JuiceBox Pro 3.0 22kW Cellular

Default version status: unaffected

  • 0 to ≤ 2.1.1.0_JB3VU096Aaffected

References