Lucene search

K
nvd[email protected]NVD:CVE-2023-34995
HistoryJul 07, 2023 - 12:15 a.m.

CVE-2023-34995

2023-07-0700:15:09
CWE-521
web.nvd.nist.gov
1
piigab m-bus
security vulnerability
weak password
brute force attack
password guidelines

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

46.8%

There are no requirements for setting a complex passwordΒ for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.

Affected configurations

Nvd
Node
piigabm-bus_900s_firmwareMatch-
AND
piigabm-bus_900sMatch-
VendorProductVersionCPE
piigabm-bus_900s_firmware-cpe:2.3:o:piigab:m-bus_900s_firmware:-:*:*:*:*:*:*:*
piigabm-bus_900s-cpe:2.3:h:piigab:m-bus_900s:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

46.8%

Related for NVD:CVE-2023-34995