Lucene search

K
nvd[email protected]NVD:CVE-2023-5754
HistoryOct 26, 2023 - 8:15 p.m.

CVE-2023-5754

2023-10-2620:15:08
CWE-307
web.nvd.nist.gov
sielco polyeco1000
weak credentials
remote attack

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

Affected configurations

NVD
Node
sielcopolyeco500Match-
AND
sielcopolyeco500_firmwareMatch1.7.0cpu
OR
sielcopolyeco500_firmwareMatch10.16fpga
Node
sielcopolyeco300Match-
AND
sielcopolyeco300_firmwareMatch2.0.0cpu
OR
sielcopolyeco300_firmwareMatch2.0.2cpu
OR
sielcopolyeco300_firmwareMatch10.19fpga
Node
sielcopolyeco1000Match-
AND
sielcopolyeco1000_firmwareMatch1.9.3cpu
OR
sielcopolyeco1000_firmwareMatch1.9.4cpu
OR
sielcopolyeco1000_firmwareMatch2.0.6cpu
OR
sielcopolyeco1000_firmwareMatch10.19fpga

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for NVD:CVE-2023-5754