← All advisories

High severity8.8NVD Advisory· Published Nov 5, 2024· Updated Jun 17, 2026

CVE-2023-29117

CVE-2023-29117

Description

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system.

Affected products

3

Enelx/Waybox Pro Firmware
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
Range: <2.1.1.0_jb3vu096a
Enel X/Wayboxllm-fuzzy
Enel X/JuiceBox Pro 3.0 22kW Cellularv5
Range: 0

Patches

Vulnerability mechanics

References

1

support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.