Enel X

Products

ProductCVEsExploitedLatest
JuiceBox Pro 3.0 22kW Cellular11–Nov 5, 2024
JuiceBox 401–Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-0778 High 8.8 Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability 0.8%
  • CVE-2023-29126 Medium 4.2 Insecure loose comparison in Enel X JuiceBox 0.3%
  • CVE-2023-29125 Critical 9.0 Heap overflow in CM_main.exe binary in Enel X JuiceBox 0.3%
  • CVE-2023-29122 Medium 6.7 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox 0.2%
  • CVE-2023-29121 Critical 9.6 Exposed TCF agent service in Enel X Juicebox 0.3%
  • CVE-2023-29120 Critical 9.6 Unauthorized Remote Command Execution in Enel X Juicebox 0.3%
  • CVE-2023-29119 Critical 9.6 Unauthorized SQLite Injection 0.3%
  • CVE-2023-29118 Critical 9.6 Unauthorized SQLite Injection in Enel X Juicebox 0.3%
  • CVE-2023-29117 High 8.8 Authentication Bypass in JuiceBox Web Manager interface 0.3%
  • CVE-2023-29116 Medium 4.3 PHP Information Disclosure in Enel X JuiceBox 0.2%
  • CVE-2023-29115 Medium 6.5 Denial of Service via Web Management interface in Enel X JuiceBox 0.3%
  • CVE-2023-29114 Medium 5.7 Unauthorized System Log Disclosure in Enel X JuiceBox 0.3%