Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-32652— PiiGAB M-Bus Cross-site Scripting

CVSS 8.0 · High EPSS 0.11% · P30
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-32652

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PiiGAB M-Bus Cross-site Scripting
Source: NVD (National Vulnerability Database)
Vulnerability Description
PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
PiiGAB M-Bus 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PiiGAB M-Bus是PiiGAB公司的一种在电表和中央数据采集系统或预付费单元之间使用的通信协议。 PiiGAB M-Bus 900S版本存在跨站脚本漏洞，该漏洞源于不会验证标识字符串，可能容易受到跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
PiiGAB M-Bus SoftwarePack 900S -

II. Public POCs for CVE-2023-32652

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-32652

请登录查看更多情报信息。

Same Patch Batch · PiiGAB · 2023-07-06 · 9 CVEs total

CVE-2023-359879.8 CRITICALPiiGAB M-Bus Use of Hard-coded Credentials
CVE-2023-368598.8 HIGHPiiGAB M-Bus Code Injection
CVE-2023-351208.8 HIGHPiiGAB M-Bus Cross-Site Request Forgery
CVE-2023-312777.5 HIGHPiiGAB M-Bus Unprotected Transport of Credentials
CVE-2023-349957.5 HIGHPiiGAB M-Bus Weak Password Requirements
CVE-2023-344337.5 HIGHPiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
CVE-2023-357656.5 MEDIUMPiiGAB M-Bus Plaintext Storage of a Password
CVE-2023-338685.9 MEDIUMPiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

IV. Related Vulnerabilities

Same product: M-Bus SoftwarePack
Same vendor: PiiGAB
Same weakness: CWE-79

V. Comments for CVE-2023-32652

No comments yet

Leave a comment