VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 28, 2022· Updated Jun 17, 2026

CVE-2022-28811

CVE-2022-28811

Description

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • CPY/Car Park Serverllm-create
    Range: =2.8.3
  • Carlosgavazzi/UWP3.0llm-fuzzy
  • Carlosgavazzi/CPY Car Park Servercpe-rescue
    Range: 2
  • Carlo Gavazzi/UWP 3.0 Monitoring Gateway and Controllerv5
    Range: 8
  • Carlo Gavazzi/UWP 3.0 Monitoring Gateway and Controller – EDP versionv5
    Range: 8
  • Carlo Gavazzi/UWP 3.0 Monitoring Gateway and Controller – Security Enhancedv5
    Range: 8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.