CVE-2012-6427

CVE-2012-6427: Carlo Gavazzi EOS Box SQL Injection

Vendor Carlo Gavazzi Automation
Product EOS-Box
Weakness CWE-89 · SQLi
Published December 23, 2012
Last update July 1, 2025

CVSS base score

What the vulnerability does

01Description

The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.

Key dates

02Disclosure timeline

December 23, 2012 CVE published
July 1, 2025 Record updated