VULNERABILITY INTELLIGENCE

CVE-2012-6428

CVSS score10 HIGH
EPSS probability1.53%
CISA KEVNot currently listed
Published2012-12-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references