CVE-2022-22525 json
Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
published 2022-09-28 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-27671
- cvss
- 7.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 68%
- public exploits
- 0
- none known
Summary
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
Patch / fix
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller 8.5.0.3
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – Security Enhanced 8.5.0.3
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – EDP version 8.5.0.3
- Carlo Gavazzi CPY Car Park Server 2.8.3
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 17 mo ago
Exploit prediction
1.20% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
- Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller – EDP version
- Carlo Gavazzi CPY Car Park Server
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
cert.vde.com
/en/advisories/VDE-2022-029/
third-party-advisory
Sources
- CVE List CVE-2022-22525
- NVD CVE-2022-22525
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.