PiiGAB M-bus 900S Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:piigab:m-bus_900s_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Piigab (ad39a975-eea0-5a43-8445-5095e805674a) |
|---|---|
| Product | M Bus 900S Firmware (e981d85c-8d23-5f0b-8402-f25f4718df29) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-36859 |
vulnerable | 2026-06-08 06:08:14.383201 |
PiiGAB M-Bus Code Injection
HIGH (8.8)
PiiGAB M-Bus
SoftwarePack 900S
does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.
Published: 2023-07-06T22:51:51.453Z
Updated: 2024-11-14T14:04:50.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35987 |
vulnerable | 2026-06-08 06:06:28.259214 |
PiiGAB M-Bus Use of Hard-coded Credentials
CRITICAL (9.8)
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
Published: 2023-07-06T22:58:06.843Z
Updated: 2024-11-13T21:32:42.878Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35765 |
vulnerable | 2026-06-08 06:06:27.546302 |
PiiGAB M-Bus Plaintext Storage of a Password
MEDIUM (6.5)
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
Published: 2023-07-06T23:01:56.339Z
Updated: 2024-10-24T13:25:22.604Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35120 |
vulnerable | 2026-06-08 06:06:26.561089 |
PiiGAB M-Bus Cross-Site Request Forgery
HIGH (8.8)
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.
Published: 2023-07-06T23:09:42.511Z
Updated: 2024-11-13T21:21:34.269Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34995 |
vulnerable | 2026-06-08 06:06:26.349198 |
PiiGAB M-Bus Weak Password Requirements
HIGH (7.5)
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.
Published: 2023-07-06T23:05:21.253Z
Updated: 2024-11-13T21:22:35.694Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34433 |
vulnerable | 2026-06-08 06:06:25.580069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33868 |
vulnerable | 2026-06-08 06:06:23.639927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32652 |
vulnerable | 2026-06-08 06:04:46.705228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31277 |
vulnerable | 2026-06-08 06:04:42.476804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.