M-Bus
by PiiGAB
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-35987 | Cri | 0.64 | 9.8 | 0.01 | Jul 6, 2023 | PiiGAB M-Bus contains hard-coded credentials which it uses for authentication. | ||
| CVE-2023-35120 | Hig | 0.57 | 8.8 | 0.00 | Jul 7, 2023 | PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to… | ||
| CVE-2023-32652 | Hig | 0.52 | 8.0 | 0.00 | Jul 7, 2023 | PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks. | ||
| CVE-2023-34995 | Hig | 0.49 | 7.5 | 0.01 | Jul 7, 2023 | There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines. | ||
| CVE-2023-34433 | Hig | 0.49 | 7.5 | 0.00 | Jul 7, 2023 | PiiGAB M-Bus stores passwords using a weak hash algorithm. | ||
| CVE-2023-31277 | Hig | 0.49 | 7.5 | 0.01 | Jul 6, 2023 | PiiGAB M-Bus transmits credentials in plaintext format. | ||
| CVE-2023-35765 | Med | 0.42 | 6.5 | 0.01 | Jul 7, 2023 | PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials. |
- risk 0.64cvss 9.8epss 0.01
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
- risk 0.57cvss 8.8epss 0.00
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to…
- risk 0.52cvss 8.0epss 0.00
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.
- risk 0.49cvss 7.5epss 0.01
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.
- risk 0.49cvss 7.5epss 0.00
PiiGAB M-Bus stores passwords using a weak hash algorithm.
- risk 0.49cvss 7.5epss 0.01
PiiGAB M-Bus transmits credentials in plaintext format.
- risk 0.42cvss 6.5epss 0.01
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.