CVE-2022-28814: Gavazziautomation Cpy Car Park Server

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device.

Affected products

• Gavazziautomation Cpy Car Park Server: before 2.8.3 (fixed in 2.8.3)
• Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware: before 8.5.0.3 (fixed in 8.5.0.3)

Published 2022-09-28. Last modified 2026-06-17.