Double-X M-Bus vulnerabilities
8 known vulnerabilities in Double-X M-Bus from MBS. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Single-A: Improper Limitation of a Pathname to a Restricted Directory
The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.
- 8.1 High severity
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary…
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
- 8.1 High severity
Single-A: External Control of File Name or Path
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
- 8.1 High severity
Single-A: External Control of File Name or Path
The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
- 8.1 High severity
Single-A: External Control of File Name or Path
The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
- 8.1 High severity
Single-A: External Control of File Name or Path
The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
- 8.1 High severity
Single-A: External Control of File Name or Path
The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
- 9.8 Critical severity
Single-A: Use of Default Password
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.