CVE-2023-31277 : PiiGAB M-Bus transmits credentials in plaintext format.

PiiGAB M-Bus transmits credentials in plaintext format.

Published 2023-07-06 23:15:09

Updated 2023-07-13 22:58:25

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2023-31277

Piigab » M-bus 900s Firmware » Version: N/A
cpe:2.3:o:piigab:m-bus_900s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Piigab » M-bus 900s » Version: N/A

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	ICS-CERT
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE-523 Unprotected Transport of Credentials

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

Assigned by: ics-cert@hq.dhs.gov (Primary)

Jump to