CVE-2023-5754





Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
icscertCNA
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
VendorProductVersion
sielcopolyeco500_firmware
1.7.0
sielcopolyeco500_firmware
10.16
sielcopolyeco300_firmware
2.0.0
sielcopolyeco300_firmware
2.0.2
sielcopolyeco300_firmware
10.19
sielcopolyeco1000_firmware
1.9.3
sielcopolyeco1000_firmware
1.9.4
sielcopolyeco1000_firmware
2.0.6
sielcopolyeco1000_firmware
10.19
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07