Lucene search
CERTVDECVELIST:CVE-2023-39171HistoryDec 07, 2023 - 2:23 p.m.
CVE-2023-39171 SENEC Storage Box V1,V2 and V3 accidentially expose a management interface
2023-12-0714:23:57
CWE-668
CERTVDE
www.cve.org
cve-2023-39171
senec storage box
management interface
publicly known admin credentials
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.3%
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Storage Box V1",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Storage Box V2",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Storage Box V3",
"vendor": "SENEC",
"versions": [
{
"status": "affected",
"version": "before Nov. 2023"
}
]
}
]References
Related
nvd
nvd
CVE-2023-39171
2023-12-07 15:15:09
prion
prion
Command injection
2023-12-07 15:15:00
cve
cve
CVE-2023-39171
2023-12-07 15:15:09
packetstorm
packetstorm
EnBw SENEC Legacy Storage Box Exposed Interface
2023-11-13 00:00:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.3%
Related for CVELIST:CVE-2023-39171