Lucene search
HistoryJul 06, 2023 - 11:15 p.m.
CVE-2023-33868
cve-2023-33868
brute force
http authentication
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
46.8%
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.
Affected configurations
Node
piigabm-bus_900s_firmwareMatch-
piigabm-bus_900sMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| piigab | m-bus_900s_firmware | - | cpe:2.3:o:piigab:m-bus_900s_firmware:-:*:*:*:*:*:*:* |
| piigab | m-bus_900s | - | cpe:2.3:h:piigab:m-bus_900s:-:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-07-06 23:15:00
cvelist
cvelist
cve
cve
CVE-2023-33868
2023-07-06 23:15:09
ics
ics
PiiGAB M-Bus
2023-07-06 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
46.8%
Related for NVD:CVE-2023-33868