Skip to content
OpenAdvisories
High · 7.5 CVE-2023-46662 EUVD-2023-50853GHSA-g7mm-5p64-5fpj

Improper Access Control in Sielco PolyEco1000

Published Oct 26, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this via a specially crafted request to gain access to sensitive information.

Affected products

VendorProductAffectedFixed
Sielco PolyEco1000 CPU:2.0.6 FPGA:10.19, CPU:1.9.4 FPGA:10.19, CPU:1.9.3 FPGA:10.19, CPU:1.7.0 FPGA:10.16, CPU:2.0.2 FPGA:10.19, CPU:2.0.0 FPGA:10.19 —

Advisories 1

References