Cyber Resilience

CVE-2023-29126

Medium

Published: 05 November 2024

Published
05 November 2024
Modified
08 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0002 7.2th percentile
Risk Priority 8 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-29126 is a medium-severity Improper Validation of Specified Type of Input (CWE-1287) vulnerability in Enelx Waybox Pro Firmware. Its CVSS base score is 4.2 (Medium).

Operationally, ranked at the 7.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.

CWE(s)
CWE-1287NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

enelx
waybox pro firmware
≤ 2.1.1.0_jb3vu096a

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References