CVE-2012-6428
The Carlo Gavazzi
EOS-Box
stores hard-coded passwords in the PHP file of
the device. By using the hard-coded passwords, attackers can log into
the device with administrative privileges. This could allow the attacker
to have unauthorized access.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-798, CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- carlosgavazzi:eos-box_photovoltaic_monitoring_system
- carlosgavazzi:eos-box_photovoltaic_monitoring_system_firmware