Lucene search

K
cvelistINCDCVELIST:CVE-2023-24504
HistoryApr 17, 2023 - 12:00 a.m.

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

2023-04-1700:00:00
INCD
www.cve.org
3
cve-2023-24504
electra central ac
adjacent attacker
unauthorized update server

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

15.5%

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

CNA Affected

[
  {
    "vendor": "Electra",
    "product": "Central AC unit",
    "versions": [
      {
        "version": "Update to the latest version",
        "status": "affected",
        "lessThan": "V7 & V8*",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

15.5%

Related for CVELIST:CVE-2023-24504