Default credentials

2023-10-2620:15:00

PRIOn knowledge base

www.prio-n.com

default credentials

remote attacks

full control

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

CPENameOperatorVersion
polyeco1000_firmwareeq1.9.3
polyeco1000_firmwareeq1.9.4
polyeco1000_firmwareeq2.0.6
polyeco1000_firmwareeq10.19
polyeco300_firmwareeq2.0.0
polyeco300_firmwareeq2.0.2
polyeco300_firmwareeq10.19
polyeco500_firmwareeq1.7.0
polyeco500_firmwareeq10.16

Name	Operator	Version
polyeco1000_firmware	eq	1.9.3
polyeco1000_firmware	eq	1.9.4
polyeco1000_firmware	eq	2.0.6
polyeco1000_firmware	eq	10.19
polyeco300_firmware	eq	2.0.0
polyeco300_firmware	eq	2.0.2
polyeco300_firmware	eq	10.19
polyeco500_firmware	eq	1.7.0
polyeco500_firmware	eq	10.16

References

www.cisa.gov/news-events/ics-advisories/icsa-23-299-07