high7.5
CVE-2023-46662
Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement.
Impact
Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this via a specially crafted request to gain access to sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sielco | Polyeco500 Firmware | Versions 1.7.0, 10.16 |
| Sielco | Polyeco300 Firmware | Versions 2.0.0, 2.0.2, 10.19 |
| Sielco | Polyeco1000 Firmware | Versions 1.9.3, 1.9.4, 2.0.6, 10.19 |