Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-46665 EUVD-2023-50856GHSA-cggm-fc75-c35c

Improper Access Control in Sielco PolyEco1000

Published Oct 26, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges.

Affected products

VendorProductAffectedFixed
Sielco PolyEco1000 CPU:2.0.6 FPGA:10.19, CPU:1.9.4 FPGA:10.19, CPU:1.9.3 FPGA:10.19, CPU:1.7.0 FPGA:10.16, CPU:2.0.2 FPGA:10.19, CPU:2.0.0 FPGA:10.19 —

Advisories 1

References