CVE-2022-22525
highpriority · track · 0EPSS 0.012 · 68 %ileCHEUUSEPSS · scored 2026-10-27
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedcarlo_gavazzi_psirt
Please update to software/firmware versions as described below: | Article Nr. | Product Name and Description | Fixed in version | |------------------|---------------------------------------------------------------|--------------------------| | UWP30RSEXXX | UWP 3.0 Monitoring Gateway and Controller | >= 8.5.0.3 (available from April 27th, 2022) | | UWP30RSEXXXSE | UWP 3.0 Monitoring Gateway and Controller – Security Enhanced | >= 8.5.0.3 (available from April 27th, 2022) | | UWP30RSEXXXEDP | UWP 3.0 Monitoring Gateway and Controller – EDP version | >= 8.5.0.3 (available from April 27th, 2022) | | SBP2CPY24 | CPY Car Park Server | >= 2.8.3 (available from June 28th, 2022) |
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.6–9.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (14)
Products and version ranges known to be affected.
- gavazziautomation cpy car park server< 2.8.3nvdUScpe:2.3:a:gavazziautomation:cpy_car_park_server:*:*:*:*:*:*:*:*
- gavazziautomation uwp 3.0 monitoring gateway and controller firmware< 8.5.0.3nvdUScpe:2.3:o:gavazziautomation:uwp_3.0_monitoring_gateway_and_controller_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- VDE-2022-029Carlo Gavazzi Controls: Multiple Vulnerabilities in Controller UWP 3.02022-09-26csaf · carlo_gavazzi_psirtCH
The UWP 3.0 family of Monitoring Gateways and Controllers and the CPY Car Park Server are affected by multiple vulnerabilities in their set-up software, runtime firmware, embedded Web interface.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://carlogavazzisales.com/products.htmPatchcnnvd
- https://cert.vde.com/en/advisories/VDE-2022-029/cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-22525/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-22525cnnvd
- https://cert.vde.com/en/advisories/VDE-2022-029/enisa_euvd
- https://cert.vde.com/en/advisories/VDE-2022-029/Third Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan