Approved changes feed: RSS · Atom

cpe:2.3:h:efacec:bcu_500:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEfacec (0489868d-c5a9-5b2a-bc10-8031ae8c43b4)
ProductBcu 500 (ad00f479-8795-5dec-9180-71ca197b6dfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6689 not_vulnerable 2026-06-08 06:21:55.297969 Cross-Site Request Forgery in EFACEC BCU 500
HIGH (8.2)
A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.
Published: 2023-12-19T23:20:22.195Z
Updated: 2026-02-25T16:34:33.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50707 not_vulnerable 2026-06-08 06:16:16.312178 Uncontrolled Resource Consumption in EFACEC BCU 500
CRITICAL (9.6)
Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.
Published: 2023-12-19T23:18:26.771Z
Updated: 2024-08-02T22:16:47.195Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.