Enbw Senec Storage Box Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Enbw Senec Storage Box Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-39169 — CVSS 9.8 (critical): The affected devices use publicly available default credentials with administrative privileges.
• CVE-2023-39172 — CVSS 9.1 (critical): The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network…
• CVE-2023-39167 — CVSS 7.5 (high): In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.
• CVE-2023-39171 — CVSS 7.2 (high): SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.