ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks As a contributor, add a "AC Forms" Gutenberg block to a...

CVE-2023-24501

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

CVE-2023-24502

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24500

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24504

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

CVE-2023-24503

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

Code injection

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

Hardcoded credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

Code injection

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

Path traversal

Electra Central AC unit – The unit opens an AP with an easily calculated password...

Code injection

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

Electra Central AC unit 安全漏洞

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause unauthorized firmware to be loaded...

CVE-2023-24500 Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24502 Electra Central AC unit – Easily calculated password

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24504

The CVE-2023-24504 entry concerns Electra Central AC units. Reported vulnerability: an adjacent attacker could cause the unit to connect to an unauthorized update server. Public sources corroborate an impact on update server trust and potential control over update behavior; however, the documents...

CVE-2023-24500

The CVE-2023-24500 entry concerns the Electra Central AC unit. Affected component/area: the unit’s firmware loading process (firmware loading capability). Root cause: adjacent access enables loading of unauthorized firmware, as described in the vulnerability note. Impact: confidentiality and inte...

Electra Central AC unit 安全漏洞

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause unauthorized firmware to be loaded...

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

Electra Central AC unit 安全漏洞

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause the unit to connect to an unauthorized update server...

CVE-2023-24501 Electra Central AC unit – Hardcoded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...