{"id":6605,"date":"2025-06-09T06:20:49","date_gmt":"2025-06-09T06:20:49","guid":{"rendered":"http:\/\/localhost\/?p=6605"},"modified":"2025-06-09T06:20:49","modified_gmt":"2025-06-09T06:20:49","slug":"egauge-eg3000-energy-monitor-setting-missing-authentication","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6605","title":{"rendered":"eGauge EG3000 Energy Monitor Setting missing authentication"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\neGauge EG3000 Energy Monitor Setting missing authentication<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-09T10:00:16.849Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\neGauge<\/td>\n<\/tr>\n
Product<\/th>\nEG3000 Energy Monitor<\/td>\n<\/tr>\n
Version<\/th>\n3.6.3<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n6.9 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:N\/VC:L\/VI:N\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe eGauge EG3000 Energy Monitor version 3.6.3 has a vulnerability where the Setting Handler component lacks authentication, allowing remote attackers to manipulate settings without proper credentials. The vulnerability has been publicly disclosed and may be exploited, but the vendor has not responded to the disclosure.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\neGauge Systems LLC<\/td>\n<\/tr>\n
Product<\/th>\nEG3000 Energy Monitor<\/td>\n<\/tr>\n
Affected Version<\/th>\n3.6.3<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n