Approved changes feed: RSS · Atom

cpe:2.3:a:piigab:m-bus_softwarepack:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPiigab (ad39a975-eea0-5a43-8445-5095e805674a)
ProductM Bus Softwarepack (89a7c1f1-fa39-5720-b616-da0ba51e65e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36859 vulnerable 2026-06-08 06:08:14.382379 PiiGAB M-Bus Code Injection
HIGH (8.8)
PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.
Published: 2023-07-06T22:51:51.453Z
Updated: 2024-11-14T14:04:50.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35987 vulnerable 2026-06-08 06:06:28.259073 PiiGAB M-Bus Use of Hard-coded Credentials
CRITICAL (9.8)
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
Published: 2023-07-06T22:58:06.843Z
Updated: 2024-11-13T21:32:42.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35765 vulnerable 2026-06-08 06:06:27.546134 PiiGAB M-Bus Plaintext Storage of a Password
MEDIUM (6.5)
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
Published: 2023-07-06T23:01:56.339Z
Updated: 2024-10-24T13:25:22.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35120 vulnerable 2026-06-08 06:06:26.561061 PiiGAB M-Bus Cross-Site Request Forgery
HIGH (8.8)
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.
Published: 2023-07-06T23:09:42.511Z
Updated: 2024-11-13T21:21:34.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34995 vulnerable 2026-06-08 06:06:26.349080 PiiGAB M-Bus Weak Password Requirements
HIGH (7.5)
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.
Published: 2023-07-06T23:05:21.253Z
Updated: 2024-11-13T21:22:35.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34433 vulnerable 2026-06-08 06:06:25.579946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33868 vulnerable 2026-06-08 06:06:23.638978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32652 vulnerable 2026-06-08 06:04:46.705107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31277 vulnerable 2026-06-08 06:04:42.475959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.