CVE-2023-29116 MEDIUM

CVE-2023-29116: PHP Information Disclosure in Enel X JuiceBox

Vendor Enel X
Product JuiceBox Pro 3.0 22kW Cellular
Weakness CWE-200 · Info exposure
Published November 5, 2024
Last update November 5, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained.

Key dates

02Disclosure timeline

November 5, 2024 CVE published
November 5, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-0708 Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.2 - Unauthenticated Information Exposure CVE-2025-53156 Windows Storage Port Driver Information Disclosure Vulnerability CVE-2025-12010 Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode CVE-2024-7842 SourceCodester Online Graduate Tracer System export_it.php information disclosure CVE-2025-47417 Enable Debug Images