Field Assessment
AI analysis pending.
CVE
CVE-2022-28811
Severity
CRITICAL
CVSS
9.8
EPSS
1.09%
Original Filing — NVD Description
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.