CVE-2023-34433
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
PiiGAB M-Bus stores passwords using a weak hash algorithm, which may lead to easy cracking.
Risk Assessment
Weak password hashing increases the risk of unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to implement a stronger hashing algorithm and to regularly update user passwords.
Other vulnerabilities in PiiGAB M-Bus
See all- CVE-2023-35987Critical
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
- CVE-2023-35765Medium
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
- CVE-2023-35120High
PiiGAB M-Bus is vulnerable to cross-site request forgery (CSRF). An attacker can send a phishing email to the device owner, hoping they will click on a link, which could result in unauthorized command execution.
- CVE-2023-34995High
The lack of requirements for setting complex passwords in PiiGAB M-Bus may lead to successful brute force attacks if the password aligns with recommended password guidelines.
Original NVD description (English source)
PiiGAB M-Bus stores passwords using a weak hash algorithm.