Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-46661 EUVD-2023-50852GHSA-7ccm-7p68-rfcw

Improper Access Control in Sielco PolyEco1000

Published Oct 26, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Sielco Product: PolyEco1000

Description

Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

Affected products

VendorProductAffectedFixed
Sielco PolyEco1000 CPU:2.0.6 FPGA:10.19, CPU:1.9.4 FPGA:10.19, CPU:1.9.3 FPGA:10.19, CPU:1.7.0 FPGA:10.16, CPU:2.0.2 FPGA:10.19, CPU:2.0.0 FPGA:10.19 —

Advisories 1

References