Description

















Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges.












Published: 2023-10-26
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-50856 Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges.
History

Thu, 16 Jan 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Sielco Polyeco1000 Polyeco1000 Firmware Polyeco300 Polyeco300 Firmware Polyeco500 Polyeco500 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2025-01-16T21:26:57.648Z

Reserved: 2023-10-24T16:27:17.282Z

Link: CVE-2023-46665

cve-icon Vulnrichment

Updated: 2024-08-02T20:53:20.790Z

cve-icon NVD

Status : Modified

Published: 2023-10-26T21:15:08.033

Modified: 2024-11-21T08:29:01.103

Link: CVE-2023-46665

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses