CVE-2023-39169

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The affected devices use publicly available default credentials with administrative privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
SENECStorage Box V1before Nov. 2023
SENECStorage Box V2before Nov. 2023
SENECStorage Box V3before Nov. 2023

References

Timeline

Published
Dec 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-39177.5Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 alCVE-2023-391717.2SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.CVE-2023-391729.1The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traCVE-2023-391738.8In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account accessCVE-2023-391747.5In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackersCVE-2023-391756.1In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possibleCVE-2023-391767.5A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lacCVE-2023-391797.5A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation CVE-2023-391807.5A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after itsCVE-2023-391817.8A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of boundCVE-2023-391827.8A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of boundCVE-2023-391837.8A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bound
CVE-2023-39169: Critical severity, CVSS 9.8 | Vulnix