Read the docs

PiiGAB

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

PiiGAB records in CISA KEV

No PiiGAB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M-bus 900s Firmware 9 records MEDIUM

Records

9 records

TI-2023-18047 CVE-2023-35987 · GHSA-pr5p-f98w-w666

PiiGAB M-Bus Use of Hard-coded Credentials

Priority MEDIUM 50

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00753 Published 2023-07-06 No fix listed CWE-798
TI-2023-17484 CVE-2023-34995 · GHSA-jg8c-pvq3-mfjq

PiiGAB M-Bus Weak Password Requirements

Priority MEDIUM 49

There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2023-07-06 No fix listed CWE-521
TI-2023-18649 CVE-2023-36859 · GHSA-gqmc-qc62-72h3

PiiGAB M-Bus Code Injection

Priority MEDIUM 44

PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00759 Published 2023-07-06 No fix listed CWE-94
TI-2023-17571 CVE-2023-35120 · GHSA-vjcv-jc9c-9hqc

PiiGAB M-Bus Cross-Site Request Forgery

Priority MEDIUM 40

PiiGAB M-Bus is vulnerable to cross-site request forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00288 Published 2023-07-06 No fix listed CWE-352
TI-2023-15929 CVE-2023-32652 · GHSA-7c2c-733v-4897

PiiGAB M-Bus Cross-site Scripting

Priority LOW 37

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00457 Published 2023-07-06 No fix listed CWE-79
TI-2023-17859 CVE-2023-35765 · GHSA-mr58-q27j-cvg9

PiiGAB M-Bus Plaintext Storage of a Password

Priority LOW 29

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00509 Published 2023-07-06 No fix listed CWE-256
Open these records in search →