3659 matches found
CVE-2023-35987
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...
CVE-2023-36859
PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...
CVE-2023-31277
PiiGAB M-Bus transmits credentials in plaintext format...
Hardcoded credentials
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...
Command injection
PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...
Format string
PiiGAB M-Bus transmits credentials in plaintext format...
CVE-2023-35120
CVE-2023-35120 covers a CSRF vulnerability in PiiGAB M-Bus (M-Bus SoftwarePack 900S). The issue allows an attacker to induce a user to click a crafted link (phishing email) while the user is authenticated, potentially causing the device to execute a GET/POST request due to the user’s cookies. Tec...
CVE-2023-35120 PiiGAB M-Bus Cross-Site Request Forgery
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...
CVE-2023-35120 PiiGAB M-Bus Cross-Site Request Forgery
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then...
CVE-2023-34433 PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
PiiGAB M-Bus stores passwords using a weak hash algorithm...
CVE-2023-34433
PiiGAB M-Bus stores passwords using a weak hash algorithm (CVE-2023-34433). Affected product area: M-Bus SoftwarePack 900S. Root cause: password storage using an insufficient computational hash. Impact is substantial (confidentiality, integrity, and availability concerns) per documented CVSS vect...
CVE-2023-34433 PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
PiiGAB M-Bus stores passwords using a weak hash algorithm...
CVE-2023-34995 PiiGAB M-Bus Weak Password Requirements
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines...
CVE-2023-34995
CVE-2023-34995 concerns PiiGAB M-Bus 900S where there are no requirements for a complex password, enabling practical brute-force attempts against authentication. Public references indicate multiple related vulnerabilities (weak password rules, plaintext credential handling, hard-coded credentials...
CVE-2023-34995 PiiGAB M-Bus Weak Password Requirements
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines...
CVE-2023-32652
PiiGAB M-Bus is affected by CVE-2023-32652 due to not validating identification strings before processing, which can enable cross-site scripting (XSS). The vulnerability affects the M-Bus SoftwarePack 900S family and is documented across multiple feeds (NVD, CVE List, PRION, CNNVD, CISA ICS). The...
CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...
CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...
CVE-2023-35765
The CVE-2023-35765 issue affects PiiGAB M-Bus (notably the M-Bus SoftwarePack 900S). The root cause is plaintext storage of credentials, which could allow a low-privilege user to obtain admin credentials. Public sources at NVD/CVE and the ICS advisory describe the impact as enabling credential ex...