Skip to content
OpenAdvisories

Product · EFACEC

UC 500E

4 known vulnerabilities.

UC 500E at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Medium max 6.3
    ICSA-23-353-03 4 CVEs

    EFACEC UC 500E

    Successful exploitation of these vulnerabilities could allow an attacker to retrieve sensitive information, gain unauthorized access to the product, or redirect users to malicious websites.

    EFACEC
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.1
    CVE-2023-50706

    Improper Access Control in EFACEC UC 500E

    A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.

    EFACEC UC 500E
  • Medium 5.3
    CVE-2023-50705

    Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E

    An attacker could create malicious requests to obtain sensitive information about the web server.

    EFACEC UC 500E
  • Medium 4.3
    CVE-2023-50704

    URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E

    An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.

    EFACEC UC 500E
  • Medium 6.3
    CVE-2023-50703

    Cleartext Transmission of Sensitive Information in EFACEC UC 500E

    An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.

    EFACEC UC 500E