CVE-2022-22524: Gavazziautomation Cpy Car Park Server

Critical severity, CVSS 9.4. EPSS: 1.2% chance of exploitation in the next 30 days.

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerability to gain full database access, modify users and stop services .

Affected products

• Gavazziautomation Cpy Car Park Server: before 2.8.3 (fixed in 2.8.3)
• Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware: before 8.5.0.3 (fixed in 8.5.0.3)

Published 2022-09-28. Last modified 2026-06-17.