PT-2023-6587 · Sielco · Sielco Polyeco1000

Gjoko Krstic · Published 2023-10-26 · Updated 2023-11-07 · CVE-2023-46665

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sielco PolyEco1000 (affected versions not specified)

Description The issue is related to an authentication bypass vulnerability. This vulnerability allows an attacker to modify passwords in a POST request, resulting in unauthorized access to the affected device with administrative privileges. The vulnerability is associated with inadequate access control, which can be exploited by a remote attacker to gain administrative access to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2023-07352

CVE-2023-46665

Affected Products

Sielco Polyeco1000

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-46665 · Security Note
• https://bdu.fstec.ru/vul/2023-07352 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46665 · Vendor Advisory
• https://twitter.com/CVEnew/status/1717639193730727963 · Twitter Post
• https://t.me/latest_high_impact_cve/54 · Telegram Post
• https://t.me/cibsecurity/73018 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-299-07 · Note
• https://twitter.com/VulmonFeeds/status/1717673110063689941 · Twitter Post