CVE-2023-39169

2023-12-0715:15:07

CWE-798

[email protected]

web.nvd.nist.gov

default credentials

administrative privileges

devices affected

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

JSON

The affected devices use publicly available default credentials with administrative privileges.

Affected configurations

Nvd

Node

enbwsenec_storage_boxMatchv1

AND

enbwsenec_storage_box_firmwareMatch-

Node

enbwsenec_storage_boxMatchv2

AND

enbwsenec_storage_box_firmwareMatch-

Node

enbwsenec_storage_boxMatchv3

AND

enbwsenec_storage_box_firmwareMatch-

VendorProductVersionCPE
enbwsenec_storage_boxv1cpe:2.3:h:enbw:senec_storage_box:v1:*:*:*:*:*:*:*
enbwsenec_storage_box_firmware-cpe:2.3:o:enbw:senec_storage_box_firmware:-:*:*:*:*:*:*:*
enbwsenec_storage_boxv2cpe:2.3:h:enbw:senec_storage_box:v2:*:*:*:*:*:*:*
enbwsenec_storage_boxv3cpe:2.3:h:enbw:senec_storage_box:v3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
enbw	senec_storage_box	v1	cpe:2.3:h:enbw:senec_storage_box:v1:::::::*
enbw	senec_storage_box_firmware	-	cpe:2.3:o:enbw:senec_storage_box_firmware:-:::::::*
enbw	senec_storage_box	v2	cpe:2.3:h:enbw:senec_storage_box:v2:::::::*
enbw	senec_storage_box	v3	cpe:2.3:h:enbw:senec_storage_box:v3:::::::*