Known vulnerabilities in M-Bus Metering Gateway CMe3100

Vendor: Elvaco
Software: M-Bus Metering Gateway CMe3100
Software CPE: cpe:2.3:h:elvaco:m-bus_metering_gateway_cme3100:*:*:*:*:*:*:*:*
Website: https://www.elvaco.com/en
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting M-Bus Metering Gateway CMe3100 M-Bus Metering Gateway CMe3100 is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99239 - Missing Authentication for Critical Function
CVE-2024-49399		 CWE-306 Medium
No
No
 - 22.10.2024 SB20241022354
#VU99238 - Unrestricted Upload of File with Dangerous Type
CVE-2024-49398		 CWE-434 High
No
No
 - 22.10.2024 SB20241022354
#VU99237 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-49397		 CWE-79 Low
No
No
 - 22.10.2024 SB20241022354
#VU99236 - Insufficiently Protected Credentials
CVE-2024-49396		 CWE-522 Medium
No
No
 - 22.10.2024 SB20241022354