CVE-2023-34995
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
The lack of requirements for setting complex passwords in PiiGAB M-Bus may lead to successful brute force attacks if the password aligns with recommended password guidelines.
Risk Assessment
The organization may be exposed to attacks that exploit simple passwords, increasing the risk of unauthorized access to the system.
Recommendation
It is recommended to implement password complexity requirements to minimize the risk of brute force attacks.
Other vulnerabilities in PiiGAB M-Bus
See all- CVE-2023-35987Critical
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
- CVE-2023-35765Medium
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
- CVE-2023-35120High
PiiGAB M-Bus is vulnerable to cross-site request forgery (CSRF). An attacker can send a phishing email to the device owner, hoping they will click on a link, which could result in unauthorized command execution.
- CVE-2023-34433High
PiiGAB M-Bus stores passwords using a weak hash algorithm, which may lead to easy cracking.
Original NVD description (English source)
There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.