Enel X
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JuiceBox Pro 3.0 22kW Cellular | 11 | – | Nov 5, 2024 |
| JuiceBox 40 | 1 | – | Jan 23, 2026 |
Exploited and recent CVEs
- CVE-2026-0778 Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability 0.8%
- CVE-2023-29126 Insecure loose comparison in Enel X JuiceBox 0.3%
- CVE-2023-29125 Heap overflow in CM_main.exe binary in Enel X JuiceBox 0.3%
- CVE-2023-29122 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox 0.2%
- CVE-2023-29121 Exposed TCF agent service in Enel X Juicebox 0.3%
- CVE-2023-29120 Unauthorized Remote Command Execution in Enel X Juicebox 0.3%
- CVE-2023-29119 Unauthorized SQLite Injection 0.3%
- CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox 0.3%
- CVE-2023-29117 Authentication Bypass in JuiceBox Web Manager interface 0.3%
- CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox 0.2%
- CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox 0.3%
- CVE-2023-29114 Unauthorized System Log Disclosure in Enel X JuiceBox 0.3%