Vulnerability · Published Dec 19, 2023 · Assigned by icscert

CVE-2023-50707Uncontrolled Resource Consumption in EFACEC BCU 500

Critical 9.6

In plain English

A critical-severity uncontrolled resource consumption in BCU 500 from EFACEC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)9.6Critical

Exploit odds (30 days)0.7%top 46.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.

Affected products (as reported)

Vendor	Product	Versions
EFACEC	BCU 500	version 4.07

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-02 government-resource