Vendor
SENEC
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-39169 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2023 | The affected devices use publicly available default credentials with administrative privileges. | ||
| CVE-2023-39172 | Cri | 0.59 | 9.1 | 0.01 | Dec 7, 2023 | The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic. | ||
| CVE-2023-39167 | Hig | 0.49 | 7.5 | 0.01 | Dec 7, 2023 | In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data. | ||
| CVE-2023-39171 | Hig | 0.47 | 7.2 | 0.01 | Dec 7, 2023 | SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials. |
- risk 0.64cvss 9.8epss 0.01
The affected devices use publicly available default credentials with administrative privileges.
- risk 0.59cvss 9.1epss 0.01
The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic.
- risk 0.49cvss 7.5epss 0.01
In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.
- risk 0.47cvss 7.2epss 0.01
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.