9.8

CVE-2023-5754





Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sielco ≫ Polyeco500 Firmware Version1.7.0 SwEditioncpu
   Sielco ≫ Polyeco500 Version-
Sielco ≫ Polyeco500 Firmware Version10.16 SwEditionfpga
   Sielco ≫ Polyeco500 Version-
Sielco ≫ Polyeco300 Firmware Version2.0.0 SwEditioncpu
   Sielco ≫ Polyeco300 Version-
Sielco ≫ Polyeco300 Firmware Version2.0.2 SwEditioncpu
   Sielco ≫ Polyeco300 Version-
Sielco ≫ Polyeco300 Firmware Version10.19 SwEditionfpga
   Sielco ≫ Polyeco300 Version-
Sielco ≫ Polyeco1000 Firmware Version1.9.3 SwEditioncpu
   Sielco ≫ Polyeco1000 Version-
Sielco ≫ Polyeco1000 Firmware Version1.9.4 SwEditioncpu
   Sielco ≫ Polyeco1000 Version-
Sielco ≫ Polyeco1000 Firmware Version2.0.6 SwEditioncpu
   Sielco ≫ Polyeco1000 Version-
Sielco ≫ Polyeco1000 Firmware Version10.19 SwEditionfpga
   Sielco ≫ Polyeco1000 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.242
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ics-cert@hq.dhs.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
Third Party Advisory
US Government Resource