Read the docs

EFACEC

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

EFACEC records in CISA KEV

No EFACEC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uc 500e Firmware 4 records LOW Bcu 500 Firmware 2 records MEDIUM

Records

2 records in Bcu 500 Firmware · all components

TI-2023-27653 CVE-2023-50707 · GHSA-29gw-r2hj-fm58

Uncontrolled Resource Consumption in EFACEC BCU 500

Priority MEDIUM 42

Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00699 Published 2023-12-19 No fix listed CWE-400
TI-2023-06117 CVE-2023-6689 · GHSA-q724-v3q2-pw8j

Cross-Site Request Forgery in EFACEC BCU 500

Priority LOW 38

A successful CSRF attack could force the user to perform state changing requests on the application.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2023-12-19 No fix listed CWE-352
Open these records in search →