Lucene search
HistoryApr 17, 2023 - 10:15 p.m.
CVE-2023-24500
electra central
ac unit
unauthorized fw
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
15.5%
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
Affected configurations
Node
electra-aircentral_ac_unitMatch-
electra-aircentral_ac_unit_firmwareMatchv7
ORelectra-aircentral_ac_unit_firmwareMatchv8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| electra-air | central_ac_unit | - | cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:* |
| electra-air | central_ac_unit_firmware | v7 | cpe:2.3:o:electra-air:central_ac_unit_firmware:v7:*:*:*:*:*:*:* |
| electra-air | central_ac_unit_firmware | v8 | cpe:2.3:o:electra-air:central_ac_unit_firmware:v8:*:*:*:*:*:*:* |
Related
cvelist
cvelist
prion
prion
Code injection
2023-04-17 22:15:00
cve
cve
CVE-2023-24500
2023-04-17 22:15:08
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
15.5%
Related for NVD:CVE-2023-24500