Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2023-36859

PiiGAB M-Bus Code Injection

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware
CVE-2023-35765

PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware
CVE-2023-35120

PiiGAB M-Bus Cross-Site Request Forgery

PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware
CVE-2023-34995

PiiGAB M-Bus Weak Password Requirements

There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware
CVE-2023-33868

PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware
CVE-2023-32652

PiiGAB M-Bus Cross-site Scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Piigab
Products
M-bus 900s M-bus 900s Firmware