PT-2023-23932 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue is related to the lack of validation of identification strings before processing, which could make PiiGAB M-Bus vulnerable to cross-site scripting attacks. Recommendations: A...

PiiGAB M-Bus 900S 信任管理问题漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A vulnerability with trust management issues exists in PiiGAB M-Bus version 900S, which stems from the inclusion of hard-coded credentials for authentication...

PiiGAB M-Bus 代码注入漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A code injection vulnerability exists in PiiGAB M-Bus version 900S, which stems from an inability to properly clean up user input and could allow an attacker to inje...

PT-2023-24875 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the use of a weak hash algorithm for storing passwords. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data collection systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version that stems from the transmission of credentials in clear text format...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data acquisition systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version, which stems from the fact that there is no requirement to set a complex password, which could be...

PiiGAB M-Bus 跨站脚本漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A cross-site scripting vulnerability exists in PiiGAB M-Bus version 900S, which stems from the fact that it will not validate identification strings and may be...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data acquisition systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version that stems from the use of a weak hash algorithm to store passwords...

PT-2023-25405 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns hard-coded credentials used for authentication in PiiGAB M-Bus. No information is provided about the estimated number of potentially affected devices or real-world...

PT-2023-23270 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the transmission of credentials in plaintext format. This means that when credentials are sent over the network, they are not encrypted, potentially allowing...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A security vulnerability exists in PiiGAB M-Bus version 900S, which stems from an unlimited number of login attempts and could allow an attacker to perform brute forc...

PiiGAB M-Bus 跨站请求伪造漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A cross-site request forgery vulnerability exists in PiiGAB M-Bus version 900S, which stems from susceptibility to cross-site request forgery attacks and can be...

PT-2023-25152 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker could send a phishing email to the device owner with a link that, when clicked, executes a certain command if the...

PT-2023-25727 · Piigab · Piigab M-Bus Softwarepack 900S

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus SoftwarePack 900S affected versions not specified Description: The issue is related to the software not correctly sanitizing user input, which could allow an attacker to inject arbitrary commands. Recommendations: At the moment,...

PiiGAB M-Bus 安全漏洞

PiiGAB M-Bus is a communication protocol from PiiGAB used between meters and centralized data collection systems or prepaid units. A security vulnerability exists in the PiiGAB M-Bus 900S version, which originates from the storage of credentials in clear text...

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker and denial of service due to Guava (CVE-2020-8908, CVE-2018-10237).

Summary IBM App Connect Enterprise toolkit and IBM Integration Bus toolkit are vulnerable to a remote attacker and denial of service due to Guava CVE-2020-8908, CVE-2018-10237. The resolving fix includes Guava version =31.1 Vulnerability Details CVEID:CVE-2020-8908 DESCRIPTION: Guava could allow ...

PT-2023-20999 · Pax · Pax A930 +1

Name of the Vulnerable Software and Affected Versions: PAX A930 device with PayDroid version 7.1.1 Virgo V04.5.02 20220722 Description: The issue allows the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must hav...

Vulnerabilities fixed in IBM Integration Bus

IBM has fixed vulnerabilities in Integration Bus. A malicious party could exploit the vulnerabilities to execute arbitrary code execute application privileges, or to access gain access to system data. IBM has released updates to fix the vulnerabilities in Integration Bus 10.1.0.1 Interim fix. For...

Security Bulletin: IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665).

Summary IBM Integration Bus is vulnerable to a remote attack due to Apache Jena CVE-2021-39239, CVE-2022-28890, CVE-2023-22665. Vulnerability Details CVEID:CVE-2023-22665 DESCRIPTION: Apache Jena could allow a remote attacker to execute arbitrary code on the system, caused by improper checking of...