CVE-2023-25556

🗓️ 18 Apr 2023 17:03:07Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 41 Views

Improper Authentication vulnerability, device compromise ris

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-25556	18 Apr 202322:29	–	circl
CNNVD	Schneider Electric StruxureWare Data Center Expert 授权问题漏洞	18 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-25556	18 Apr 202317:03	–	cvelist
EUVD	EUVD-2023-29508	3 Oct 202520:07	–	euvd
NVD	CVE-2023-25556	18 Apr 202318:15	–	nvd
OSV	CVE-2023-25556	18 Apr 202318:15	–	osv
Prion	Authentication flaw	18 Apr 202318:15	–	prion
Positive Technologies	PT-2023-1974 · Merten · Merten Knx	14 Feb 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-25556	18 Apr 202317:03	–	vulnrichment

NVD

Node

schneider-electric merten_instabus_tastermodul_1fach_system_m_firmwareMatch1.0

AND

schneider-electric merten_instabus_tastermodul_1fach_system_mMatch-

Node

schneider-electric merten_instabus_tastermodul_2fach_system_m_firmwareMatch1.0

AND

schneider-electric merten_instabus_tastermodul_2fach_system_mMatch-

Node

schneider-electric merten_tasterschnittstelle_4fach_plus_firmwareMatch1.0

schneider-electric merten_tasterschnittstelle_4fach_plus_firmwareMatch1.2

AND

schneider-electric merten_tasterschnittstelle_4fach_plusMatch-

Node

schneider-electric merten_knx_argus_180/2,20m_up_system_firmwareMatch1.0

AND

schneider-electric merten_knx_argus_180/2,20m_up_systemMatch-

Node

schneider-electric merten_jalousie-/schaltaktor_reg-k/8x/16x/10_m._hb_firmwareMatch1.0

AND

schneider-electric merten_jalousie-/schaltaktor_reg-k/8x/16x/10_m._hbMatch-

Node

schneider-electric merten_knx_uni-dimmaktor_ll_reg-k/2x230/300_w_firmwareMatch1.0

schneider-electric merten_knx_uni-dimmaktor_ll_reg-k/2x230/300_w_firmwareMatch1.1

AND

schneider-electric merten_knx_uni-dimmaktor_ll_reg-k/2x230/300_wMatch-

Node

schneider-electric merten_knx_schaltakt.2x6a_up_m.2_eing._firmwareMatch0.1

AND

schneider-electric merten_knx_schaltakt.2x6a_up_m.2_eing.Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Merten INSTABUS Tastermodul 1fach System M 625199",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten INSTABUS Tastermodul 2fach System M 625299",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten Tasterschnittstelle 4fach plus 670804",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      },
      {
        "status": "affected",
        "version": "Program Version 1.2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten KNX ARGUS 180/2,20M UP SYSTEM 631725",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten Jalousie-/Schaltaktor REG-K/8x/16x/10 m. HB 649908",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten KNX Uni-Dimmaktor LL REG-K/2x230/300 W MEG6710-0002",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 1.0"
      },
      {
        "status": "affected",
        "version": "Program Version 1.1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Merten KNX Schaltakt.2x6A UP m.2 Eing. MEG6003-0002",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Program Version 0.1"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 07:49Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.3 - 8.8

EPSS0.00105

SSVC

CWE-287