Code injection

2023-10-2620:15:00

PRIOn knowledge base

www.prio-n.com

code injection

privilege escalation

post requests

nvd

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

CPENameOperatorVersion
polyeco1000_firmwareeq1.9.3
polyeco1000_firmwareeq1.9.4
polyeco1000_firmwareeq2.0.6
polyeco1000_firmwareeq10.19
polyeco300_firmwareeq2.0.0
polyeco300_firmwareeq2.0.2
polyeco300_firmwareeq10.19
polyeco500_firmwareeq1.7.0
polyeco500_firmwareeq10.16

Name	Operator	Version
polyeco1000_firmware	eq	1.9.3
polyeco1000_firmware	eq	1.9.4
polyeco1000_firmware	eq	2.0.6
polyeco1000_firmware	eq	10.19
polyeco300_firmware	eq	2.0.0
polyeco300_firmware	eq	2.0.2
polyeco300_firmware	eq	10.19
polyeco500_firmware	eq	1.7.0
polyeco500_firmware	eq	10.16

References

www.cisa.gov/news-events/ics-advisories/icsa-23-299-07