CVE-2023-35765

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

Command injection

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-31277

PiiGAB M-Bus transmits credentials in plaintext format...

Format string

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-35765

The CVE-2023-35765 issue affects PiiGAB M-Bus (notably the M-Bus SoftwarePack 900S). The root cause is plaintext storage of credentials, which could allow a low-privilege user to obtain admin credentials. Public sources at NVD/CVE and the ICS advisory describe the impact as enabling credential ex...

CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-31277

CVE-2023-31277 corresponds to PiiGAB M-Bus vulnerability: Unprotected Transport of Credentials due to plaintext transmission in the M-Bus SoftwarePack 900S. Impacted product: PiiGAB M-Bus (M-Bus SoftwarePack 900S). Root cause: credentials transmitted in clear text over the network, enabling poten...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

GHSA-9VRM-V9XV-X3XR HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

PenTales: “User enumeration is not a vulnerability” – I beg to differ

At Rapid7 we love a good pentest story. So often they show the cleverness, skill, resilience, and dedication to our customer’s security that can only come from actively trying to break it! In this series, we’re going to share some of our favorite tales from the pen test desk and hopefully highlig...

PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

PT-2023-25297 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue allows a low-level user to potentially gain admin credentials because PiiGAB M-Bus stores credentials in a plaintext file. Recommendations: At the moment, there is no...

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component of the authentication agent that could allow an authenticated, remote attacker to view sensiti...

PT-2023-23270 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the transmission of credentials in plaintext format. This means that when credentials are sent over the network, they are not encrypted, potentially allowing...

CVE-2023-3395

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...

Design/Logic Flaw

?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...

CVE-2023-3395

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...