CVE-2023-46661 — CRITICAL (9.8)

Vulnerability Description

Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Sielco	Polyeco500 Firmware	1.7.0
Sielco	Polyeco500	-
Sielco	Polyeco300 Firmware	2.0.0
Sielco	Polyeco300	-
Sielco	Polyeco1000 Firmware	1.9.3
Sielco	Polyeco1000	-

Related Weaknesses (CWE)

CWE-284

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2023-46661?

CVE-2023-46661 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

How severe is CVE-2023-46661?

CVE-2023-46661 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-46661?

Check the references section above for vendor advisories and patch information. Affected products include: Sielco Polyeco500 Firmware, Sielco Polyeco500, Sielco Polyeco300 Firmware, Sielco Polyeco300, Sielco Polyeco1000 Firmware.