CVE-2023-33868

PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

State
Published
Severity
5.9 Medium
Published
Jul 6, 2023
Updated
Oct 24, 2024
Reserved
Jun 27, 2023

Read the record on cve.org

Description

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.

Scores

CVSSScoreVectorSource
3.15.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nicscert

Weaknesses

  • CWE-307 Improper Restriction of Excessive Authentication Attempts

Affected Products

ProductVersions
M-Bus SoftwarePackPiiGAB
  • 900SAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.