CVE-2022-22525: Gavazziautomation Cpy Car Park Server

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function

Affected products

• Gavazziautomation Cpy Car Park Server: before 2.8.3 (fixed in 2.8.3)
• Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware: before 8.5.0.3 (fixed in 8.5.0.3)

Published 2022-09-28. Last modified 2026-06-17.