9.8

CVE-2023-5754

Improper Restriction of Excessive Authentication Attempts in Sielco PolyEco1000





Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sielco ≫ Polyeco500 Firmware Version 1.7.0 SwEdition cpu
   Sielco ≫ Polyeco500 Version -
Sielco ≫ Polyeco500 Firmware Version 10.16 SwEdition fpga
   Sielco ≫ Polyeco500 Version -
Sielco ≫ Polyeco300 Firmware Version 2.0.0 SwEdition cpu
   Sielco ≫ Polyeco300 Version -
Sielco ≫ Polyeco300 Firmware Version 2.0.2 SwEdition cpu
   Sielco ≫ Polyeco300 Version -
Sielco ≫ Polyeco300 Firmware Version 10.19 SwEdition fpga
   Sielco ≫ Polyeco300 Version -
Sielco ≫ Polyeco1000 Firmware Version 1.9.3 SwEdition cpu
   Sielco ≫ Polyeco1000 Version -
Sielco ≫ Polyeco1000 Firmware Version 1.9.4 SwEdition cpu
   Sielco ≫ Polyeco1000 Version -
Sielco ≫ Polyeco1000 Firmware Version 2.0.6 SwEdition cpu
   Sielco ≫ Polyeco1000 Version -
Sielco ≫ Polyeco1000 Firmware Version 10.19 SwEdition fpga
   Sielco ≫ Polyeco1000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.384
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
DHS.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
Third Party Advisory
US Government Resource