PT-2022-19256 · Cpy+1 · Cpy Car Park Server+1

Vera Mens · Published 2022-09-27 · Updated 2022-10-28 · CVE-2022-28816

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Carlo Gavazzi UWP3.0 versions (affected versions not specified) CPY Car Park Server version 2.8.3

Description The Sentilo Proxy in the affected software is prone to reflected XSS, which only affects the Sentilo service.

Recommendations For Carlo Gavazzi UWP3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For CPY Car Park Server version 2.8.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-28816

Affected Products

Cpy Car Park Server

Carlo Gavazzi Uwp3.0

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-28816 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28816 · Vendor Advisory
• https://t.me/cibsecurity/50588 · Telegram Post
• https://cert.vde.com/en/advisories/VDE-2022-029 · Note
• https://t.me/true_secator/3479 · Telegram Post