Lucene search
HistoryApr 17, 2023 - 10:15 p.m.
CVE-2023-24504
cve-2023-24504
electra central
adjacent attacker
unauthorized update server
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
15.5%
Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.
Affected configurations
Node
electra-aircentral_ac_unit_firmwareMatchv7
ORelectra-aircentral_ac_unit_firmwareMatchv8
electra-aircentral_ac_unitMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| electra-air | central_ac_unit_firmware | v7 | cpe:2.3:o:electra-air:central_ac_unit_firmware:v7:*:*:*:*:*:*:* |
| electra-air | central_ac_unit_firmware | v8 | cpe:2.3:o:electra-air:central_ac_unit_firmware:v8:*:*:*:*:*:*:* |
| electra-air | central_ac_unit | - | cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
prion
prion
Code injection
2023-04-17 22:15:00
cve
cve
CVE-2023-24504
2023-04-17 22:15:08
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
15.5%
Related for NVD:CVE-2023-24504