CVE-2023-50705 - Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E

Back Back to CVE browser

MEDIUM

Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E

Published Dec 19, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 0.52%

Description

An attacker could create malicious requests to obtain sensitive information about the web server.

Affected products

Vendor Efacec Product UC 500E Default
unaffected
- Version
  version 10.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Efacec

UC 500E

unaffected

Version	Status	Constraints
version 10.1.0	affected	-

Remediation

Vendor solution

EFACEC has released UC 500E version 10.1.1.

For more information, contact EFACEC support https://www.efacec.pt/en/contacts/ .

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-863

Incorrect Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-55482
Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-03
government-resourceThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-55482		Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-03		government-resourceThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Dec 19, 2023

Updated Aug 2, 2024

Reserved Dec 11, 2023

Link CVE-2023-50705

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-50705

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-50705

ENISA EUVD

Assigner icscert

Published Dec 19, 2023

Updated Aug 2, 2024

Exploited since n/a

Link EUVD-2023-55482

EUVD-2023-55482