Filtered by vendor Efacec Subscriptions
Filtered by product Bcu 500 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-6689 1 Efacec 2 Bcu 500, Bcu 500 Firmware 2023-12-29 8.8 High
A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.
CVE-2023-50707 1 Efacec 2 Bcu 500, Bcu 500 Firmware 2023-12-29 7.5 High
Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.