← All advisories

Critical severity9.6NVD Advisory· Published Nov 5, 2024· Updated Jun 17, 2026

CVE-2023-29119

CVE-2023-29119

Description

Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.

Affected products

3

Enelx/Waybox Pro Firmware
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
Range: <2.1.1.0_jb3vu096a
Enel X/Waybox Web management applicationllm-create
Enel X/JuiceBox Pro 3.0 22kW Cellularv5
Range: 0

Patches

Vulnerability mechanics

References

1

support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.