CVE-2012-6428 - CVE House
Back to Database
Status published Critical CVE-2012-6428

Carlo Gavazzi EOS Box Hard-Coded Credentials

Vulnerability Description

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6428

Credits & Attribution

No credits recorded in the NVD database.

References

More from Carlo Gavazzi Automation

View All →
CVE-2012-6427
Carlo Gavazzi EOS Box SQL Injection
High 7.8

Affected Vendor

Carlo Gavazzi Automation

View all reports →

Affected Software

EOS-Box
Vulnerable Versions:
0

Timeline

Official Publish: December 23rd, 2012
Last Modified: July 1st, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-798

MITRE ATT&CK TTPs

T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1021 Remote Services
Lateral Movement
T1190 Exploit Public-Facing Application
Initial Access
T1098 Account Manipulation
Privilege Escalation