Lucene search
CERTVDECVELIST:CVE-2023-39169HistoryDec 07, 2023 - 2:14 p.m.
CVE-2023-39169 SENEC: Storage Box V1,V2 and V3 using default credentials
2023-12-0714:14:43
CWE-798
CERTVDE
www.cve.org
1
cve-2023-39169
sen storage
default credentials
administrative privileges
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.1%
The affected devices use publicly available default credentials with administrative privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Storage Box V1",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Storage Box V2",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Storage Box V3",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
}
]References
Related
cve
cve
CVE-2023-39169
2023-12-07 15:15:07
CVE-2023-39170
2023-12-07 15:15:09
prion
prion
Default credentials
2023-12-07 15:15:00
Open redirect
2023-12-07 15:15:00
nvd
nvd
CVE-2023-39169
2023-12-07 15:15:07
CVE-2023-39170
2023-12-07 15:15:09
packetstorm
packetstorm
EnBw SENEC Legacy Storage Box Exposed Interface
2023-11-13 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.1%
Related for CVELIST:CVE-2023-39169