CVE-2012-6428

CVE-2012-6428: Carlo Gavazzi EOS Box Hard-Coded Credentials

Vendor Carlo Gavazzi Automation

Product EOS-Box

Weakness CWE-798 · Hardcoded credentials

Published December 23, 2012

Last update July 1, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Key dates

02Disclosure timeline

December 23, 2012 CVE published

July 1, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2012-6428 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/798.html

Related vulnerabilities

04Related CVE

CVE-2021-21820 CVE-2025-7072 Hardcoded credentials in KAON CG3000T/CG3000CT routers CVE-2026-8032 PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials CVE-2025-34198 Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image CVE-2025-58656 WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability