CVE-2023-29155

9.8 criticalEPSS 0.9%

Critical (9.8) in inea me rtu firmware. EPSS 0.9% chance of exploitation in the next 30 days.

Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inea:me_rtu_firmware

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02
https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02

Check your stack JSON