Skip to content
OpenAdvisories
Critical ICSA-23-353-02 2 CVEs

EFACEC BCU 500

Published Dec 19, 2023 · Updated Dec 19, 2023

Vendor: EFACEC Product: BCU 500

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the affected product or compromise the web application through a cross-site request forgery (CSRF) vulnerability.

Vulnerabilities 2

  • Critical 9.6
    CVE-2023-50707

    Uncontrolled Resource Consumption in EFACEC BCU 500

    Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.

    EFACEC BCU 500
  • High 8.2
    CVE-2023-6689

    Cross-Site Request Forgery in EFACEC BCU 500

    A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.

    EFACEC BCU 500

Revision history

  1. #1

    Initial Publication

References