title: Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
description: In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function
problem types: CWE-20 Improper Input Validation
affected:
{
product: UWP 3.0 Monitoring Gateway and Controller
vendor: Carlo Gavazzi
versions:
lessThan: 8.5.0.3, status: affected, version: 8, versionType: custom
}
{
product: UWP 3.0 Monitoring Gateway and Controller – Security Enhanced
vendor: Carlo Gavazzi
versions:
lessThan: 8.5.0.3, status: affected, version: 8, versionType: custom
}
{
product: UWP 3.0 Monitoring Gateway and Controller – EDP version
vendor: Carlo Gavazzi
versions:
lessThan: 8.5.0.3, status: affected, version: 8, versionType: custom
}
{
product: CPY Car Park Server
vendor: Carlo Gavazzi
versions:
lessThan: 2.8.3, status: affected, version: 2, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]