enbw records

4 published records for vendor enbw.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-39169No exploit	SENEC: Storage Box V1,V2 and V3 using default credentialsenbw · senec storage box firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.8%	Dec 7, 2023
36Monitor	CVE-2023-39172No exploit	SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencryptedenbw · senec storage box firmware · CWE-319 Pre-auth Weak crypto	Critical9.1	—	0.5%	Dec 7, 2023
30Monitor	CVE-2023-39167No exploit	SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerabilityenbw · senec storage box firmware · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.9%	Dec 7, 2023
28Monitor	CVE-2023-39171No exploit	SENEC Storage Box V1,V2 and V3 accidentially expose a management interfaceenbw · senec storage box firmware · CWE-668	High7.2	—	1.0%	Dec 7, 2023

CVE-2023-39169
39Monitor
SENEC: Storage Box V1,V2 and V3 using default credentials
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
enbw · senec storage box firmwareDec 7, 2023
CVE-2023-39172
36Monitor
SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
enbw · senec storage box firmwareDec 7, 2023
CVE-2023-39167
30Monitor
SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
enbw · senec storage box firmwareDec 7, 2023
CVE-2023-39171
28Monitor
SENEC Storage Box V1,V2 and V3 accidentially expose a management interface
HighCVSS 7.2No exploitEPSS 1%
enbw · senec storage box firmwareDec 7, 2023