Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-50706

Improper Access Control in EFACEC UC 500E

A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Efacec
Products
Uc 500e Uc 500e Firmware
CVE-2023-50703

Cleartext Transmission of Sensitive Information in EFACEC UC 500E

An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Efacec
Products
Uc 500e Uc 500e Firmware
CVE-2023-50705

Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E

An attacker could create malicious requests to obtain sensitive information about the web server.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Efacec
Products
Uc 500e Uc 500e Firmware
CVE-2023-50704

URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E

An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Efacec
Products
Uc 500e Uc 500e Firmware