Lucene search

CERTVDECVE-2023-39169

HistoryDec 07, 2023 - 3:15 p.m.

CVE-2023-39169

2023-12-0715:15:07

CWE-798

CERTVDE

web.nvd.nist.gov

cve-2023-39169

nvd

default credentials

administrative privileges

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

The affected devices use publicly available default credentials with administrative privileges.

Affected configurations

Nvd

Node

enbwsenec_storage_boxMatchv1

AND

enbwsenec_storage_box_firmwareMatch-

Node

enbwsenec_storage_boxMatchv2

AND

enbwsenec_storage_box_firmwareMatch-

Node

enbwsenec_storage_boxMatchv3

AND

enbwsenec_storage_box_firmwareMatch-

VendorProductVersionCPE
enbwsenec_storage_boxv1cpe:2.3:h:enbw:senec_storage_box:v1:*:*:*:*:*:*:*
enbwsenec_storage_box_firmware-cpe:2.3:o:enbw:senec_storage_box_firmware:-:*:*:*:*:*:*:*
enbwsenec_storage_boxv2cpe:2.3:h:enbw:senec_storage_box:v2:*:*:*:*:*:*:*
enbwsenec_storage_boxv3cpe:2.3:h:enbw:senec_storage_box:v3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
enbw	senec_storage_box	v1	cpe:2.3:h:enbw:senec_storage_box:v1:::::::*
enbw	senec_storage_box_firmware	-	cpe:2.3:o:enbw:senec_storage_box_firmware:-:::::::*
enbw	senec_storage_box	v2	cpe:2.3:h:enbw:senec_storage_box:v2:::::::*
enbw	senec_storage_box	v3	cpe:2.3:h:enbw:senec_storage_box:v3:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Storage Box V1",
    "vendor": "SENEC",
    "versions": [
      {
        "status": "affected",
        "version": "before Nov. 2023"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Storage Box V2",
    "vendor": "SENEC",
    "versions": [
      {
        "status": "affected",
        "version": "before Nov. 2023"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Storage Box V3",
    "vendor": "SENEC",
    "versions": [
      {
        "status": "affected",
        "version": "before Nov. 2023"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Nov/3

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2023-39169