Browse CVEs

CRITICAL 9.8 CVE-2023-46665 Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthor… Polyeco500 Firmware Mitigation only Fix from $2,3002023-10-26 CRITICAL 9.1 CVE-2023-46664 Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-sup… Polyeco500 Firmware Mitigation only Fix from $2,3002023-10-26 HIGH 8.1 CVE-2023-46663 Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface all… Polyeco500 Firmware Mitigation only Fix from $1,9502023-10-26 CRITICAL 9.8 CVE-2023-0897 Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the s… Polyeco500 Firmware Mitigation only Fix from $2,3002023-10-26 CRITICAL 9.8 CVE-2023-46661 Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests. Polyeco500 Firmware Mitigation only Fix from $2,3002023-10-26 CRITICAL 9.8 CVE-2023-5754 Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control … Polyeco500 Firmware Mitigation only Fix from $2,3002023-10-26 HIGH 7.5 CVE-2023-46662 Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote att… Polyeco500 Firmware Mitigation only Fix from $1,9502023-10-26 HIGH 8.8 CVE-2023-45317 The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. … Analog Fm Transmitter Exc5000gx Firmware Mitigation only Fix from $1,9502023-10-26 MEDIUM 6.5 CVE-2023-45228 The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissi… Analog Fm Transmitter Exc5000gx Firmware Mitigation only Fix from $1,6002023-10-26 CRITICAL 9.8 CVE-2023-42769 The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, b… Analog Fm Transmitter Exc5000gx Firmware Mitigation only Fix from $2,3002023-10-26 HIGH 8.8 CVE-2023-41966 The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to se… Analog Fm Transmitter Exc5000gx Firmware No fix yet Fix from $1,9502023-10-26