CVE-2023-46665 — CRITICAL (9.8)

Vulnerability Description

Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Sielco	Polyeco500 Firmware	1.7.0
Sielco	Polyeco500	-
Sielco	Polyeco300 Firmware	2.0.0
Sielco	Polyeco300	-
Sielco	Polyeco1000 Firmware	1.9.3
Sielco	Polyeco1000	-

Related Weaknesses (CWE)

CWE-284

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2023-46665?

CVE-2023-46665 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device...

How severe is CVE-2023-46665?

CVE-2023-46665 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-46665?

Check the references section above for vendor advisories and patch information. Affected products include: Sielco Polyeco500 Firmware, Sielco Polyeco500, Sielco Polyeco300 Firmware, Sielco Polyeco300, Sielco Polyeco1000 Firmware.