CVE-2023-29120

CVE-2023-29120 is a critical OS command injection vulnerability affecting the Enel X Waybox web management application and its firmware. This flaw allows an unauthenticated attacker on the same network to execute arbitrary operating system commands with administrator privileges, posing a severe risk to the Waybox system. With a CVSS score of 8.8 (High), it has a low attack complexity and no user interaction required, enabling complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.