Back to Database
Status published
Medium
CVE-2023-50706
Improper Access Control in EFACEC UC 500E
Vulnerability Description
A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-50706
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Aarón Flecha Menéndez of S21sec
More from EFACEC
View All →CVE-2023-6689
Cross-Site Request Forgery in EFACEC BCU 500
High
8.2
CVE-2023-50707
Uncontrolled Resource Consumption in EFACEC BCU 500
Critical
9.6
CVE-2023-50705
Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
Medium
5.3
CVE-2023-50704
URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
Medium
4.3
CVE-2023-50703
Cleartext Transmission of Sensitive Information in EFACEC UC 500E
Medium
6.3
Affected Vendor
EFACEC
View all reports →Affected Software
UC 500E
Vulnerable Versions:
version 10.1.0
Timeline
Official Publish:
December 19th, 2023
Last Modified:
February 25th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L