PiiGAB M-Bus vulnerabilities

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.

PiiGAB M-Bus is vulnerable to cross-site request forgery (CSRF). An attacker can send a phishing email to the device owner, hoping they will click on a link, which could result in unauthorized command execution.

The lack of requirements for setting complex passwords in PiiGAB M-Bus may lead to successful brute force attacks if the password aligns with recommended password guidelines.

PiiGAB M-Bus stores passwords using a weak hash algorithm, which may lead to easy cracking.