Vulnerabilities > Enelx > Waybox PRO Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-05 | CVE-2023-29117 | Improper Authentication vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. | 8.8 |
| 2024-11-05 | CVE-2023-29118 | SQL Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. | 8.8 |
| 2024-11-05 | CVE-2023-29119 | SQL Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. | 8.8 |
| 2024-11-05 | CVE-2023-29120 | OS Command Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. | 8.8 |
| 2024-11-05 | CVE-2023-29121 | Unspecified vulnerability in Enelx Waybox PRO Firmware Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. low complexity enelx | 8.8 |
| 2024-11-05 | CVE-2023-29125 | Out-of-bounds Write vulnerability in Enelx Waybox PRO Firmware A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. | 8.0 |
| 2024-11-05 | CVE-2023-29126 | Unspecified vulnerability in Enelx Waybox PRO Firmware The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. low complexity enelx | 8.8 |