| शीर्षक | eGauge_Systems_LLC eGauge EG3000 Energy Monitor v3.6.3 Missing Authentication for Critical Function |
|---|
| विवरण | The EG3000 energy monitoring device exposes multiple unauthenticated web interfaces, allowing unauthorized actors to retrieve sensitive operational and user data without authentication. This violates the principle of least privilege and exposes three categories of critical information:
Energy Usage Data: Real-time and historical electricity consumption patterns, potentially revealing occupancy habits or business operations.
Network Configuration: Device network settings, including connectivity details that could facilitate lateral network movement.
System Telemetry: Software environment details (OS, packages) that may aid further exploit development. |
|---|
| स्रोत | ⚠️ https://github.com/zeke2997/CVE_request_eGauge_Systems_LLC |
|---|
| उपयोगकर्ता | zeke (UID 84610) |
|---|
| सबमिशन | 27/05/2025 05:41 PM (1 वर्ष पहले) |
|---|
| संयम | 08/06/2025 07:46 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 311631 [eGauge EG3000 Energy Monitor 3.6.3 Setting कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|