Skip to content
OpenAdvisories
High · 7.5 CVE-2023-39167 EUVD-2023-42902GHSA-vjcv-792v-vg3p

SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability

Published Dec 7, 2023 · Updated Nov 4, 2025 · Assigned by CERTVDE

Vendor: SENEC Product: Storage Box V1 Product: Storage Box V2 Product: Storage Box V3

Description

In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data.

Affected products

VendorProductAffectedFixed
SENEC Storage Box V1 all (until 19.06.2023) —
SENEC Storage Box V2 all (until 19.06.2023) —
SENEC Storage Box V3 all (until 19.06.2023) —

References