CVE Feed

    Dashboard / CVE / CVE-2023-46664

    CVE-2023-46664

    Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages.

    Published:Oct 26, 2023
    Last Modified:Jan 16, 2025
    EPS:Oct 26, 2023
    EPSS Score:0.00019
    CVSS Score:7.5

    Affected Products

    Vendor
    Sielco
    Product
    Polyeco1000
    Vendor
    Sielco
    Product
    Polyeco1000 Firmware
    Vendor
    Sielco
    Product
    Polyeco300
    Vendor
    Sielco
    Product
    Polyeco300 Firmware
    Vendor
    Sielco
    Product
    Polyeco500
    Vendor
    Sielco
    Product
    Polyeco500 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2023-46665 (CVSS 9.8) — Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker…
    CVE-2023-46663 (CVSS 7.5) — Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behin…
    CVE-2023-46662 (CVSS 7.5) — Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access contro…
    CVE-2023-46661 (CVSS 9.8) — Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST re…
    CVE-2023-5754 (CVSS 9.1) — Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in re…
    CVE-2023-0897 (CVSS 8.8) — Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a br…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High