PiiGAB M-Bus
Successful exploitation of these vulnerabilities could crash allow an attacker to inject arbitrary commands, steal passwords, or trick valid users into executing malicious commands.
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-35765US | medium6.5 | — | ||
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
| ||||
| CVE-2023-35120US | high8.8 | — | ||
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that th… | ||||
| CVE-2023-34995US | critical9.8 | — | ||
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with r… | ||||
| CVE-2023-34433US | critical9.8 | — | ||
PiiGAB M-Bus stores passwords using a weak hash algorithm.
| ||||
| CVE-2023-32652US | medium6.1 | — | ||
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.
| ||||
| CVE-2023-36859US | critical9.8 | — | ||
PiiGAB M-Bus
SoftwarePack 900S
does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.
| ||||
| CVE-2023-35987US | critical9.8OT erhöht | — | ||
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
| ||||
| CVE-2023-33868US | critical9.8 | — | ||
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.
| ||||
| CVE-2023-31277US | high7.5 | — | ||
PiiGAB M-Bus transmits credentials in plaintext format.
| ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-187-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-187-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (9)
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
- MitigationM-Bus SoftwarePack
PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan