CVE-2022-28815: Gavazziautomation Cpy Car Park Server

Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days.

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service.

Affected products

• Gavazziautomation Cpy Car Park Server: before 2.8.3 (fixed in 2.8.3)
• Gavazziautomation Uwp 3.0 Monitoring Gateway And Controller Firmware: before 8.5.0.3 (fixed in 8.5.0.3)

Published 2022-09-28. Last modified 2026-06-17.