Lucene search
IcscertCVELIST:CVE-2023-5754HistoryOct 26, 2023 - 7:47 p.m.
CVE-2023-5754 Improper Restriction of Excessive Authentication Attempts in Sielco PolyEco1000
2023-10-2619:47:06
CWE-307
icscert
www.cve.org
2
cve-2023-5754
improper restriction
excessive authentication attempts
sielco polyeco1000
remote password attacks
full system control
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
10
Confidence
High
EPSS
0.001
Percentile
43.8%
Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "PolyEco1000",
"vendor": "Sielco ",
"versions": [
{
"status": "affected",
"version": "CPU:2.0.6 FPGA:10.19"
},
{
"status": "affected",
"version": "CPU:1.9.4 FPGA:10.19"
},
{
"status": "affected",
"version": "CPU:1.9.3 FPGA:10.19"
},
{
"status": "affected",
"version": "CPU:1.7.0 FPGA:10.16"
},
{
"status": "affected",
"version": "CPU:2.0.2 FPGA:10.19"
},
{
"status": "affected",
"version": "CPU:2.0.0 FPGA:10.19"
}
]
}
]Related
prion
prion
Default credentials
2023-10-26 20:15:00
cve
cve
CVE-2023-5754
2023-10-26 20:15:08
nvd
nvd
CVE-2023-5754
2023-10-26 20:15:08
zeroscience
zeroscience
Sielco PolyEco Digital FM Transmitter 2.0.6 Default Credentials
2023-04-10 00:00:00
ics
ics
Sielco PolyEco FM Transmitter
2023-10-26 12:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
10
Confidence
High
EPSS
0.001
Percentile
43.8%
Related for CVELIST:CVE-2023-5754