CVE-2023-39167 — HIGH (7.5)

Q: What is CVE-2023-39167?

CVE-2023-39167 is a vulnerability with a CVSS score of 7.5 (HIGH). In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.

Q: How severe is CVE-2023-39167?

CVE-2023-39167 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-39167?

Check the references section above for vendor advisories and patch information. Affected products include: Enbw Senec Storage Box Firmware, Enbw Senec Storage Box.

Vulnerability Description

In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Enbw	Senec Storage Box Firmware	<= 2023-06-19
Enbw	Senec Storage Box	v1

Related Weaknesses (CWE)

CWE-862

References

https://seclists.org/fulldisclosure/2023/Nov/5ExploitMailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2023/Nov/10
https://seclists.org/fulldisclosure/2023/Nov/5ExploitMailing ListThird Party Advisory

FAQ

What is CVE-2023-39167?

CVE-2023-39167 is a vulnerability with a CVSS score of 7.5 (HIGH). In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.

How severe is CVE-2023-39167?

CVE-2023-39167 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-39167?

Check the references section above for vendor advisories and patch information. Affected products include: Enbw Senec Storage Box Firmware, Enbw Senec Storage Box.