← Back

CVE-2023-46664

nvd nist
Published: Oct 26, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages.

Affected (9)

Sielco
3 products
Polyeco500 Firmware
Polyeco300 Firmware
Polyeco1000 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sielco
Polyeco500 Firmware
Version 1.7.0
Polyeco500 Firmware
Version 10.16
Running on/withPlatform Versions
Sielco
Polyeco500
All versions
Configuration B
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sielco
Polyeco300 Firmware
Version 10.19
Polyeco300 Firmware
Version 2.0.0
Polyeco300 Firmware
Version 2.0.2
Running on/withPlatform Versions
Sielco
Polyeco300
All versions
Configuration C
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sielco
Polyeco1000 Firmware
Version 1.9.3
Polyeco1000 Firmware
Version 1.9.4
Polyeco1000 Firmware
Version 10.19
Polyeco1000 Firmware
Version 2.0.6
Running on/withPlatform Versions
Sielco
Polyeco1000
All versions

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.