CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
43.8%
Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.
Vendor | Product | Version | CPE |
---|---|---|---|
sielco | polyeco500 | - | cpe:2.3:h:sielco:polyeco500:-:*:*:*:*:*:*:* |
sielco | polyeco500_firmware | 1.7.0 | cpe:2.3:o:sielco:polyeco500_firmware:1.7.0:*:*:*:cpu:*:*:* |
sielco | polyeco500_firmware | 10.16 | cpe:2.3:o:sielco:polyeco500_firmware:10.16:*:*:*:fpga:*:*:* |
sielco | polyeco300 | - | cpe:2.3:h:sielco:polyeco300:-:*:*:*:*:*:*:* |
sielco | polyeco300_firmware | 2.0.0 | cpe:2.3:o:sielco:polyeco300_firmware:2.0.0:*:*:*:cpu:*:*:* |
sielco | polyeco300_firmware | 2.0.2 | cpe:2.3:o:sielco:polyeco300_firmware:2.0.2:*:*:*:cpu:*:*:* |
sielco | polyeco300_firmware | 10.19 | cpe:2.3:o:sielco:polyeco300_firmware:10.19:*:*:*:fpga:*:*:* |
sielco | polyeco1000 | - | cpe:2.3:h:sielco:polyeco1000:-:*:*:*:*:*:*:* |
sielco | polyeco1000_firmware | 1.9.3 | cpe:2.3:o:sielco:polyeco1000_firmware:1.9.3:*:*:*:cpu:*:*:* |
sielco | polyeco1000_firmware | 1.9.4 | cpe:2.3:o:sielco:polyeco1000_firmware:1.9.4:*:*:*:cpu:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
43.8%