PiiGAB M-Bus
Successful exploitation of these vulnerabilities could crash allow an attacker to inject arbitrary commands, steal passwords, or trick valid users into executing malicious commands.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-35765US | medium6.5 | — | ||
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
| ||||
| CVE-2023-35120US | high8.8 | — | ||
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that th… | ||||
| CVE-2023-34995US | critical9.8 | — | ||
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with r… | ||||
| CVE-2023-34433US | critical9.8 | — | ||
PiiGAB M-Bus stores passwords using a weak hash algorithm.
| ||||
| CVE-2023-32652US | medium6.1 | — | ||
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.
| ||||
| CVE-2023-36859US | critical9.8 | — | ||
PiiGAB M-Bus
SoftwarePack 900S
does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.
| ||||
| CVE-2023-35987US | critical9.8OT elevated | — | ||
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
| ||||
| CVE-2023-33868US | critical9.8 | — | ||
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.
| ||||
| CVE-2023-31277US | high7.5 | — | ||
PiiGAB M-Bus transmits credentials in plaintext format.
| ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-187-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-187-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (9)
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan