Skip to content
OpenAdvisories
Critical ICSA-23-026-02 2 CVEs

Econolite EOS (Update A)

Published Jan 26, 2023 · Updated Jun 22, 2023 · Revision 2

Vendor: Econolite Product: EOS

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-23-026-02 Econolite EOS that was published January 26, 2023.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-0452

    Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. A configur…

    Econolite EOS
  • High 7.5
    CVE-2023-0451

    Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certa…

    Econolite EOS

Revision history

  1. #2

    Update A - Added patch 3.2.23 information

  2. #1

    Initial Publication

References