efacec UC 500E Firmware 10.1.0
Approved changes feed: RSS · Atom
cpe:2.3:o:efacec:uc_500e_firmware:10.1.0:*:*:*:*:*:*:*
part: o version: 10.1.0 update: *
| Vendor | Efacec (0489868d-c5a9-5b2a-bc10-8031ae8c43b4) |
|---|---|
| Product | Uc 500E Firmware (f43e164b-3efa-517c-a960-58c9ee40b8ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50706 |
vulnerable | 2026-06-08 06:16:16.308041 |
Improper Access Control in EFACEC UC 500E
MEDIUM (4.1)
A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.
Published: 2023-12-19T23:47:49.654Z
Updated: 2026-02-25T16:34:32.912Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50705 |
vulnerable | 2026-06-08 06:16:16.307657 |
Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
MEDIUM (5.3)
An attacker could create malicious requests to obtain sensitive information about the web server.
Published: 2023-12-19T23:45:17.101Z
Updated: 2024-08-02T22:16:47.250Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50704 |
vulnerable | 2026-06-08 06:16:16.307064 |
URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
MEDIUM (4.3)
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.
Published: 2023-12-19T23:43:11.595Z
Updated: 2024-09-16T18:27:57.707Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50703 |
vulnerable | 2026-06-08 06:16:16.300440 |
Cleartext Transmission of Sensitive Information in EFACEC UC 500E
MEDIUM (6.3)
An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.
Published: 2023-12-19T23:40:49.215Z
Updated: 2026-02-25T16:34:33.086Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.