CVE-2023-39171

SENEC Storage Box V1,V2 and V3 accidentially expose a management interface

SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials.

Affected

SENEC · Storage Box V1 · Storage Box V2 · Storage Box V3

CVSS v3.1 CERT

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.08% chance of exploitation in the next 30 days, 64th percentile

Published

2023-12-07

Updated

2025-11-04

Proof-of-concept exploits (1)

• https://seclists.org/fulldisclosure/2023/Nov/2

References

• CVE Record
• NVD entry