CVE-2023-35987
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.
Risk Assessment
The presence of hard-coded credentials may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to remove hard-coded credentials and implement more secure authentication methods.
Other vulnerabilities in PiiGAB M-Bus
See all- CVE-2023-35765Medium
PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
- CVE-2023-35120High
PiiGAB M-Bus is vulnerable to cross-site request forgery (CSRF). An attacker can send a phishing email to the device owner, hoping they will click on a link, which could result in unauthorized command execution.
- CVE-2023-34995High
The lack of requirements for setting complex passwords in PiiGAB M-Bus may lead to successful brute force attacks if the password aligns with recommended password guidelines.
- CVE-2023-34433High
PiiGAB M-Bus stores passwords using a weak hash algorithm, which may lead to easy cracking.
Original NVD description (English source)
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.