ByteOS Network

NVD Vulnerability Details :

CVE-2023-29117

Analyzed

Source-cve@asrg.io

Published At-05 Nov, 2024 | 16:15

Updated At-08 Nov, 2024 | 16:08

Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

enelx>>waybox_pro_firmware>>Versions before 2.1.1.0_jb3vu096a(exclusive)

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov
CWE-287	Secondary	cve@asrg.io

Hyperlink	Source	Resource
https://support-emobility.enelx.com/content/dam/enelxmobility/italia/documenti/manuali-schede-tecniche/Waybox-3-Security-Bulletin-06-2024-V1.pdf	cve@asrg.io	Vendor Advisory