CVE-2023-32652

PiiGAB M-Bus is affected by CVE-2023-32652 due to not validating identification strings before processing, which can enable cross-site scripting (XSS). The vulnerability affects the M-Bus SoftwarePack 900S family and is documented across multiple feeds (NVD, CVE List, PRION, CNNVD, CISA ICS). The...

CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-35765

The CVE-2023-35765 issue affects PiiGAB M-Bus (notably the M-Bus SoftwarePack 900S). The root cause is plaintext storage of credentials, which could allow a low-privilege user to obtain admin credentials. Public sources at NVD/CVE and the ICS advisory describe the impact as enabling credential ex...

CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-35987

CVE-2023-35987 concerns hard-coded credentials in PiiGAB M-Bus authentication. The vulnerability affects the M-Bus SoftwarePack 900S product family and is described in multiple sources (ICS/CISA advisory and CVE records). Root cause: hard-coded credentials used for authentication, enabling remote...

CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-31277

CVE-2023-31277 corresponds to PiiGAB M-Bus vulnerability: Unprotected Transport of Credentials due to plaintext transmission in the M-Bus SoftwarePack 900S. Impacted product: PiiGAB M-Bus (M-Bus SoftwarePack 900S). Root cause: credentials transmitted in clear text over the network, enabling poten...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-33868 PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication...

CVE-2023-33868 PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication...

CVE-2023-36859 PiiGAB M-Bus Code Injection

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...

CVE-2023-36859

CVE-2023-36859 affects PiiGAB M-Bus SoftwarePack 900S. Connected sources confirm a code injection vulnerability caused by improper sanitization of user input, enabling an attacker to inject arbitrary commands. The issue is tied to the M-Bus gateway software (900S) and is exploitable remotely with...

CVE-2023-36859 PiiGAB M-Bus Code Injection

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...

AZL-27388 CVE-2023-37453 affecting package kernel for versions less than 5.15.135.1-2

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in drivers/usb/core/sysfs.c...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Freedesktop D-Bus denial of service vulnerability

Summary Potential Freedesktop D-Buss denial of service vulnerabilities has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-42010 DESCRIPTION: Freedesktop D-Bus is vulnerable to a...

CISA Releases Three Industrial Control Systems Advisories

CISA has released three Industrial Control Systems ICS advisories on July 6, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for...

PT-2023-25297 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue allows a low-level user to potentially gain admin credentials because PiiGAB M-Bus stores credentials in a plaintext file. Recommendations: At the moment, there is no...