by Kastro
Paper/Archive/CVE-2023-39169

CVE-2023-39169

SENEC Storage Box V1 — SENEC: Storage Box V1,V2 and V3 using default credentials

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.6.596 × 2011.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The affected devices use publicly available default credentials with administrative privileges.

Affected

ProductAffectedFixed inSource
Storage Box V1before Nov. 2023–CNA
Storage Box V2before Nov. 2023–CNA
Storage Box V3before Nov. 2023–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refseclists.org/fulldisclosure/2023/Nov/3refseclists.org/fulldisclosure/2023/Nov/10