CVE-2023-5754 — CRITICAL (9.1)

Vulnerability Description

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Sielco	Polyeco500 Firmware	1.7.0
Sielco	Polyeco500	-
Sielco	Polyeco300 Firmware	2.0.0
Sielco	Polyeco300	-
Sielco	Polyeco1000 Firmware	1.9.3
Sielco	Polyeco1000	-

Related Weaknesses (CWE)

CWE-307

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2023-5754?

CVE-2023-5754 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

How severe is CVE-2023-5754?

CVE-2023-5754 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-5754?

Check the references section above for vendor advisories and patch information. Affected products include: Sielco Polyeco500 Firmware, Sielco Polyeco500, Sielco Polyeco300 Firmware, Sielco Polyeco300, Sielco Polyeco1000 Firmware.