M-bus 900s Firmware vulnerabilities

2 known vulnerabilities in M-bus 900s Firmware from PiiGAB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  M-Bus SoftwarePack: Cross-Site Request Forgery

  CVE-2023-35120Jul 7, 2023PiiGAB

  PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that a

• 9.8 Critical severity

  M-Bus SoftwarePack: Weak Password Requirements

  CVE-2023-34995Jul 7, 2023PiiGAB

  There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.