Medium severity4.2NVD Advisory· Published Nov 5, 2024· Updated Jun 17, 2026

CVE-2023-29126

Description

The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.

Affected products

Enelx/Waybox Pro Firmware
cpe:2.3:o:enelx:waybox_pro_firmware:*:*:*:*:*:*:*:*
Range: <2.1.1.0_jb3vu096a
Enel X/Wayboxllm-fuzzy
Enel X/JuiceBox Pro 3.0 22kW Cellularv5
Range: 0

Patches

Vulnerability mechanics

References

support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.273
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000