CVE-2023-50705 MEDIUM

CVE-2023-50705: Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E

Vendor Efacec

Product UC 500E

Weakness CWE-200 · Info exposure

Published December 19, 2023

Last update August 2, 2024

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An attacker could create malicious requests to obtain sensitive information about the web server.

Key dates

December 19, 2023 CVE published

August 2, 2024 Record updated

External resources

Related vulnerabilities