Approved changes feed: RSS · Atom

cpe:2.3:h:efacec:uc_500e:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEfacec (0489868d-c5a9-5b2a-bc10-8031ae8c43b4)
ProductUc 500E (0181eb8c-b69a-59d3-a729-021aa678ecbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50706 not_vulnerable 2026-06-08 06:16:16.308182 Improper Access Control in EFACEC UC 500E
MEDIUM (4.1)
A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.
Published: 2023-12-19T23:47:49.654Z
Updated: 2026-02-25T16:34:32.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50705 not_vulnerable 2026-06-08 06:16:16.307690 Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
MEDIUM (5.3)
An attacker could create malicious requests to obtain sensitive information about the web server.
Published: 2023-12-19T23:45:17.101Z
Updated: 2024-08-02T22:16:47.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50704 not_vulnerable 2026-06-08 06:16:16.307127 URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
MEDIUM (4.3)
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.
Published: 2023-12-19T23:43:11.595Z
Updated: 2024-09-16T18:27:57.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50703 not_vulnerable 2026-06-08 06:16:16.301085 Cleartext Transmission of Sensitive Information in EFACEC UC 500E
MEDIUM (6.3)
An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.
Published: 2023-12-19T23:40:49.215Z
Updated: 2026-02-25T16:34:33.086Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.