CVE-2023-24501: Use of Hard-coded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

CVE-2023-24504: Undefined Security Weakness

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

PT-2023-19648 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue concerns hardcoded credentials in unspecified code used by the Electra Central AC unit. There is no information provided about the estimated number of potentially...

CVE-2023-24502 Electra Central AC unit – Easily calculated password

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

CVE-2023-24500 Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24501 Electra Central AC unit – Hardcoded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

CVE-2023-24502 Electra Central AC unit – Easily calculated password

Electra Central AC unit – The unit opens an AP with an easily calculated password...

CVE-2023-24503 Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

PT-2023-19651 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to connect to an unauthorized update server. Recommendations: At the moment, there is no information about a newer...

CVE-2023-24500 Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24500

The CVE-2023-24500 entry concerns the Electra Central AC unit. Affected component/area: the unit’s firmware loading process (firmware loading capability). Root cause: adjacent access enables loading of unauthorized firmware, as described in the vulnerability note. Impact: confidentiality and inte...

CVE-2023-24504

The CVE-2023-24504 entry concerns Electra Central AC units. Reported vulnerability: an adjacent attacker could cause the unit to connect to an unauthorized update server. Public sources corroborate an impact on update server trust and potential control over update behavior; however, the documents...

CVE-2023-24502

The CVE-2023-24502 entry concerns Electra Central AC unit where the device opens an access point secured by an easily calculated password. The connected sources confirm this weakness, but do not provide concrete exploit vectors, affected firmware versions, or remediation details. Some entries not...

CVE-2023-24503 Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24500: Download of Code Without Integrity Check

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW...

CVE-2023-24502: Inadequate Encryption Strength

Electra Central AC unit – The unit opens an AP with an easily calculated password...

Electra Central AC unit 安全漏洞

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause the unit to connect to an unauthorized update server...

PT-2023-19650 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to load unauthorized firmware. Recommendations: At the moment, there is no information about a newer version that...