CVE Feed

    Dashboard / CVE / CVE-2023-0897

    CVE-2023-0897

    Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests.

    Published:Oct 26, 2023
    Last Modified:Jan 16, 2025
    EPS:Oct 26, 2023
    EPSS Score:0.00082
    CVSS Score:8.8

    Affected Products

    Vendor
    Sielco
    Product
    Polyeco1000
    Vendor
    Sielco
    Product
    Polyeco1000 Firmware
    Vendor
    Sielco
    Product
    Polyeco300
    Vendor
    Sielco
    Product
    Polyeco300 Firmware
    Vendor
    Sielco
    Product
    Polyeco500
    Vendor
    Sielco
    Product
    Polyeco500 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-384 Session Fixation

    Related CVEs

    CVE-2023-46665 (CVSS 9.8) — Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker…
    CVE-2023-46664 (CVSS 7.5) — Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application…
    CVE-2023-46663 (CVSS 7.5) — Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behin…
    CVE-2023-46662 (CVSS 7.5) — Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access contro…
    CVE-2023-46661 (CVSS 9.8) — Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST re…
    CVE-2023-5754 (CVSS 9.1) — Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in re…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High