CVE-2023-34995 PiiGAB M-Bus Weak Password Requirements

There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines...

CVE-2023-34995

CVE-2023-34995 concerns PiiGAB M-Bus 900S where there are no requirements for a complex password, enabling practical brute-force attempts against authentication. Public references indicate multiple related vulnerabilities (weak password rules, plaintext credential handling, hard-coded credentials...

CVE-2023-32652

PiiGAB M-Bus is affected by CVE-2023-32652 due to not validating identification strings before processing, which can enable cross-site scripting (XSS). The vulnerability affects the M-Bus SoftwarePack 900S family and is documented across multiple feeds (NVD, CVE List, PRION, CNNVD, CISA ICS). The...

CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-35765

The CVE-2023-35765 issue affects PiiGAB M-Bus (notably the M-Bus SoftwarePack 900S). The root cause is plaintext storage of credentials, which could allow a low-privilege user to obtain admin credentials. Public sources at NVD/CVE and the ICS advisory describe the impact as enabling credential ex...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-35987

CVE-2023-35987 concerns hard-coded credentials in PiiGAB M-Bus authentication. The vulnerability affects the M-Bus SoftwarePack 900S product family and is described in multiple sources (ICS/CISA advisory and CVE records). Root cause: hard-coded credentials used for authentication, enabling remote...

CVE-2023-31277

CVE-2023-31277 corresponds to PiiGAB M-Bus vulnerability: Unprotected Transport of Credentials due to plaintext transmission in the M-Bus SoftwarePack 900S. Impacted product: PiiGAB M-Bus (M-Bus SoftwarePack 900S). Root cause: credentials transmitted in clear text over the network, enabling poten...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-33868 PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication...

CVE-2023-33868 PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication...

CVE-2023-36859 PiiGAB M-Bus Code Injection

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...

CVE-2023-36859 PiiGAB M-Bus Code Injection

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands...

CVE-2023-36859

CVE-2023-36859 affects PiiGAB M-Bus SoftwarePack 900S. Connected sources confirm a code injection vulnerability caused by improper sanitization of user input, enabling an attacker to inject arbitrary commands. The issue is tied to the M-Bus gateway software (900S) and is exploitable remotely with...

otakjapan.co.jp Cross Site Scripting vulnerability OBB-3482552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...