ICSA-23-187-01 · Published 2023-07-06 · View on CISA ICS-CERT ↗

PiiGAB M-Bus

CVSS 9.8 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could crash allow an attacker to inject arbitrary commands, steal passwords, or trick valid users into executing malicious commands.

CVEs (9)

CVE-2023-36859 CVE-2023-33868 CVE-2023-31277 CVE-2023-35987 CVE-2023-35765 CVE-2023-32652 CVE-2023-34995 CVE-2023-34433 CVE-2023-35120

Remediations

PiiGAB created updated software to address these issues and encourages users to install the new update on their own gateway. The new software packages can be downloaded directly from the web UI in the gateway and older gateways can download it from Piigab.se or Piigab.com.

Affected Vendors

PiiGAB Processinformation i G�teborg Aktiebolag

Affected Products (1)

PiiGAB, Processinformation i G�teborg Aktiebolag · M-Bus SoftwarePack 900S

Affected Sectors

Energy

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more