EFACEC

Products

ProductCVEsExploitedLatest
QC 60/90/1208–Jan 7, 2026
UC 500E4–Dec 19, 2023
BCU 5002–Dec 19, 2023
QC60/90/1201–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2026-22539 Medium 5.3 INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP) 0.2%
  • CVE-2026-22537 Medium 6.8 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM 0.1%
  • CVE-2026-22536 High 8.6 PRIVILEGE ESCALATION VIA SUDO COMMAND 0.1%
  • CVE-2026-22535 High 8.9 FRAIL SECURITY IN MQTT PROTOCOL ALLOWS AN ATTACKER MODIFY CRITICAL PARAMETERS 0.1%
  • CVE-2026-22544 High 8.7 EXCHANGE OF CREDENTIALS IN CLEAR TEXT 0.2%
  • CVE-2026-22543 Medium 6.9 WEEK ENCODING FOR PASSWORDS 0.2%
  • CVE-2026-22542 Critical 9.2 DENIAL OF SERVICE FOR CONCURRENT CONNECTIONS ON TELNET 0.4%
  • CVE-2026-22541 High 8.2 DENIAL OF SERVICE VIA ICMP PACKETS 0.3%
  • CVE-2026-22540 Critical 9.2 DENIAL OF SERVICE VIA ARP PACKETS 0.4%
  • CVE-2023-50706 Medium 4.1 Improper Access Control in EFACEC UC 500E 0.2%
  • CVE-2023-50705 Medium 5.3 Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E 0.5%
  • CVE-2023-50704 Medium 4.3 URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E 0.4%
  • CVE-2023-50703 Medium 6.3 Cleartext Transmission of Sensitive Information in EFACEC UC 500E 0.3%
  • CVE-2023-6689 High 8.2 Cross-Site Request Forgery in EFACEC BCU 500 0.3%
  • CVE-2023-50707 Critical 9.6 Uncontrolled Resource Consumption in EFACEC BCU 500 0.7%