Lucene search

INCDCVELIST:CVE-2023-24502

HistoryApr 17, 2023 - 12:00 a.m.

CVE-2023-24502 Electra Central AC unit – Easily calculated password

2023-04-1700:00:00

INCD

www.cve.org

electra central ac

easily calculated password

ap vulnerability

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.6%

JSON

Electra Central AC unit – The unit opens an AP with an easily calculated password.

CNA Affected

[
  {
    "vendor": "Electra",
    "product": "Electra Central AC unit",
    "versions": [
      {
        "version": "Update to the latest version",
        "status": "affected",
        "lessThan": "V4 & V5 & V7 & V8*",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.6%

JSON

Related for CVELIST:CVE-2023-24502