CVE-2023-24504

The CVE-2023-24504 entry concerns Electra Central AC units. Reported vulnerability: an adjacent attacker could cause the unit to connect to an unauthorized update server. Public sources corroborate an impact on update server trust and potential control over update behavior; however, the documents...

PT-2023-19647 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to load unauthorized firmware. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-24503 Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24501 Electra Central AC unit – Hardcoded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

CVE-2023-24501

CVE-2023-24501 affects the Electra Central AC unit, where hardcoded credentials are present in unspecified code used by the unit. The security impact is high across confidentiality, integrity, and availability, with a network attack surface and no user interaction required. The available document...

CVE-2023-24503: Download of Code Without Integrity Check

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24502: Inadequate Encryption Strength

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24503

The CVE-2023-24503 entry concerns the Electra Central AC unit (Electra Smart Kit for Split AC). The connected records describe an adjacent- attacker capability to cause the unit to load unauthorized firmware, indicating the vulnerable component/process is tied to firmware loading mechanisms. Spec...

PT-2023-19650 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to load unauthorized firmware. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

PT-2023-19651 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to connect to an unauthorized update server. Recommendations: At the moment, there is no information about a newer...

CVE-2023-24504: Undefined Security Weakness

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

PT-2023-19648 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue concerns hardcoded credentials in unspecified code used by the Electra Central AC unit. There is no information provided about the estimated number of potentially...

CVE-2023-24500

The CVE-2023-24500 entry concerns the Electra Central AC unit. Affected component/area: the unit’s firmware loading process (firmware loading capability). Root cause: adjacent access enables loading of unauthorized firmware, as described in the vulnerability note. Impact: confidentiality and inte...

CVE-2023-24502 Electra Central AC unit – Easily calculated password

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24501: Use of Hard-coded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

Electra Central AC unit security vulnerability

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause unauthorized firmware to be loaded...

Security Bulletin: Vulnerability in openssl affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems. IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems have addressed the...

Security Bulletin: Vulnerability in OpenSSL affects QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter systems (CVE-2016-7055)

Summary QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter systems have addressed the following vulnerability OpenSSL. Vulnerability Details Summary QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtu...

Security Bulletin: Vulnerabilities in cURL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the following vulnerabilities in cURL. Vulnerability Details Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric...