Back to Database
Status published
Medium
CVE-2023-50704
URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
Vulnerability Description
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-50704
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Aarón Flecha Menéndez of S21sec
More from EFACEC
View All →CVE-2023-6689
Cross-Site Request Forgery in EFACEC BCU 500
High
8.2
CVE-2023-50707
Uncontrolled Resource Consumption in EFACEC BCU 500
Critical
9.6
CVE-2023-50706
Improper Access Control in EFACEC UC 500E
Medium
4.1
CVE-2023-50705
Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
Medium
5.3
CVE-2023-50703
Cleartext Transmission of Sensitive Information in EFACEC UC 500E
Medium
6.3
Affected Vendor
EFACEC
View all reports →Affected Software
UC 500E
Vulnerable Versions:
version 10.1.0
Timeline
Official Publish:
December 19th, 2023
Last Modified:
September 16th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L