Known vulnerabilities in M-Bus SoftwarePack 900S

Vendor: PiiGAB
Software: M-Bus SoftwarePack 900S
Software CPE: cpe:2.3:a:piigab:m-bus_softwarepack_900s:*:*:*:*:*:*:*:*
Website: https://www.piigab.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting M-Bus SoftwarePack 900S M-Bus SoftwarePack 900S is affected by 9 known vulnerabilities: 1 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78025 - Cross-Site Request Forgery (CSRF)
CVE-2023-35120		 CWE-352 Low
No
No
 - 07.07.2023 SB2023070719
#VU78024 - Use of Password Hash With Insufficient Computational Effort
CVE-2023-34433		 CWE-916 Medium
No
No
 - 07.07.2023 SB2023070719
#VU78023 - Weak Password Requirements
CVE-2023-34995		 CWE-521 Medium
No
No
 - 07.07.2023 SB2023070719
#VU78021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32652		 CWE-79 Low
No
No
 - 07.07.2023 SB2023070719
#VU78020 - Unprotected Storage of Credentials
CVE-2023-35765		 CWE-256 Medium
No
No
 - 07.07.2023 SB2023070719
#VU78019 - Use of Hard-coded Credentials
CVE-2023-35987		 CWE-798 High
No
No
 - 07.07.2023 SB2023070719
#VU78018 - Unprotected Transport of Credentials
CVE-2023-31277		 CWE-523 Medium
No
No
 - 07.07.2023 SB2023070719
#VU78017 - Improper Restriction of Excessive Authentication Attempts
CVE-2023-33868		 CWE-307 Medium
No
No
 - 07.07.2023 SB2023070719
#VU78016 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-36859		 CWE-94 Medium
No
No
 - 07.07.2023 SB2023070719