Advisories · Technology

PiiGAB M-Bus SoftwarePack.

Every CVE that names PiiGAB M-Bus SoftwarePack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-35120 CVE record

CVSS 8.8 High

PiiGAB M-Bus Cross-Site Request Forgery
- PiiGAB M-Bus SoftwarePack
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jul 2023
CVE-2023-34433 CVE record

CVSS 7.5 High

PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
- PiiGAB M-Bus SoftwarePack
- Weak cryptography or TLS
Not analysed yet 6 Jul 2023
CVE-2023-34995 CVE record

CVSS 7.5 High

PiiGAB M-Bus Weak Password Requirements
- PiiGAB M-Bus SoftwarePack
- Hard-coded credentials
Not analysed yet 6 Jul 2023
CVE-2023-32652 CVE record

CVSS 8.0 High

PiiGAB M-Bus Cross-site Scripting
- PiiGAB M-Bus SoftwarePack
- Cross-site scripting (XSS)
Not analysed yet 6 Jul 2023
CVE-2023-35765 CVE record

CVSS 6.5 Medium

PiiGAB M-Bus Plaintext Storage of a Password
- PiiGAB M-Bus SoftwarePack
- CWE-256
Not analysed yet 6 Jul 2023
CVE-2023-35987 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

PiiGAB M-Bus Use of Hard-coded Credentials
- PiiGAB M-Bus SoftwarePack
- Hard-coded credentials
Not analysed yet 6 Jul 2023
CVE-2023-31277 CVE record

CVSS 7.5 High

PiiGAB M-Bus Unprotected Transport of Credentials
- PiiGAB M-Bus SoftwarePack
- CWE-523
Not analysed yet 6 Jul 2023
CVE-2023-33868 CVE record

CVSS 5.9 Medium

PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts
- PiiGAB M-Bus SoftwarePack
- Authentication bypass
Not analysed yet 6 Jul 2023
CVE-2023-36859 CVE record

CVSS 8.8 High

PiiGAB M-Bus Code Injection
- PiiGAB M-Bus SoftwarePack
- Code injection
Not analysed yet 6 Jul 2023