Sielco
11 CVEs across 38 Sielco products. Browse Sielco vulnerabilities, severities, and proof-of-concept exploits.
Sielco products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46665 | Critical | 9.8 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain u… |
CVE-2023-46664 | High | 7.5 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-… |
CVE-2023-46663 | High | 7.5 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allo… |
CVE-2023-5754 | Critical | 9.1 | 2023-10-26 | Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of th… |
CVE-2023-46662 | High | 7.5 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker… |
CVE-2023-46661 | Critical | 9.8 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests. |
CVE-2023-0897 | High | 8.8 | 2023-10-26 | Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session be… |
CVE-2023-45317 | High | 8.8 | 2023-10-26 | The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can… |
CVE-2023-45228 | Medium | 6.5 | 2023-10-26 | The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by s… |
CVE-2023-42769 | Critical | 9.8 | 2023-10-26 | The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass auth… |
CVE-2023-41966 | Medium | 6.5 | 2023-10-26 | The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a par… |