Msm
6 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Msm, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Msm CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High1
- Medium4
Latest CVEs
The 6 most recently published vulnerabilities affecting Msm.
- CVE-2023-33282Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This makes it possible to make backend calls ...9.8
- CVE-2023-33284Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in context of the web server.8.8
- CVE-2023-33283Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key.5.5
- CVE-2022-3353IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products5.9
- CVE-2021-40336HTTP Response Splitting in Hitachi Energy’s MSM Product5.0
- CVE-2021-40335Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product5.0
Product grouping is registry-driven, with AI assist and human review. How it works