Storage Box V3
Approved changes feed: RSS · Atom
cpe:2.3:a:senec:storage_box_v3:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Senec (537c3a9e-8534-5821-a9ba-60b686bfeae4) |
|---|---|
| Product | Storage Box V3 (77e65721-136d-53dc-8f14-21d57292776f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39172 |
vulnerable | 2026-06-08 06:09:35.859835 |
SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted
CRITICAL (9.1)
The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic.
Published: 2023-12-07T13:58:56.198Z
Updated: 2025-11-04T19:17:41.037Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39171 |
vulnerable | 2026-06-08 06:09:35.859208 |
SENEC Storage Box V1,V2 and V3 accidentially expose a management interface
HIGH (7.2)
SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.
Published: 2023-12-07T14:23:57.124Z
Updated: 2025-11-04T19:17:39.942Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39169 |
vulnerable | 2026-06-08 06:09:35.857276 |
SENEC: Storage Box V1,V2 and V3 using default credentials
CRITICAL (9.8)
The affected devices use publicly available default credentials with administrative privileges.
Published: 2023-12-07T14:14:43.336Z
Updated: 2025-11-04T19:17:37.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39167 |
vulnerable | 2026-06-08 06:09:35.851418 |
SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability
HIGH (7.5)
In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.
Published: 2023-12-07T14:05:01.746Z
Updated: 2025-11-04T19:17:34.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.