PT-2023-23270 · Unknown · Piigab M-Bus

Published 2023-07-06 · Updated 2023-07-13 · CVE-2023-31277

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PiiGAB M-Bus (affected versions not specified)

Description The issue concerns the transmission of credentials in plaintext format. This means that when credentials are sent over the network, they are not encrypted, potentially allowing unauthorized parties to intercept and read them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-523

Related Identifiers

CVE-2023-31277

Affected Products

Piigab M-Bus

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-31277 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-187-01 · Note
• https://t.me/cibsecurity/66169 · Telegram Post