CVE-2023-50703

CVE-2023-50703 affects EFACEC UC 500E (HMI) and relates to cleartext transmission of sensitive information. Public sources in connected documents identify UC 500E version 10.1.0 as affected and note that an attacker with network access can perform a MitM attack to capture sensitive data and gain ...

CVE-2023-50705

CVE-2023-50705 affects EFACEC UC 500E (HMI), with an exposure of sensitive information to an unauthorized actor. The issue originates from UC 500E version 10.1.0, allowing an attacker to send malicious requests that retrieve sensitive information about the web server. The advisory details a CVSSv...

CVE-2023-50706

CVE-2023-50706 affects EFACEC UC 500E (HMI) with an improper access control vulnerability enabling a non-admin user with physical access to the UC500 Windows system to dump memory from running processes and extract clear credentials or valid session tokens. Red Hat and NVD entries corroborate the...

CVE-2023-50704

EFACEC UC 500E is affected by CVE-2023-50704 (Open Redirect). Affected product: UC 500E (example 10.1.0); vulnerability arises when an attacker constructs a URL in the application that redirects to an arbitrary external domain, enabling phishing against users. Mitigation: EFACEC has released UC 5...