Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Polyeco500 Firmware CRITICAL 9.8
CVE-2023-46665

Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthor…

Mitigation only
Fix from $2,300 2023-10-26
Polyeco500 Firmware CRITICAL 9.1
CVE-2023-46664

Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-sup…

Mitigation only
Fix from $2,300 2023-10-26
Polyeco500 Firmware HIGH 8.1
CVE-2023-46663

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface all…

Mitigation only
Fix from $1,950 2023-10-26
Polyeco500 Firmware CRITICAL 9.8
CVE-2023-0897

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the s…

Mitigation only
Fix from $2,300 2023-10-26
Polyeco500 Firmware CRITICAL 9.8
CVE-2023-46661

Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

Mitigation only
Fix from $2,300 2023-10-26
Polyeco500 Firmware CRITICAL 9.8
CVE-2023-5754

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control …

Mitigation only
Fix from $2,300 2023-10-26
Polyeco500 Firmware HIGH 7.5
CVE-2023-46662

Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote att…

Mitigation only
Fix from $1,950 2023-10-26
Analog Fm Transmitter Exc5000gx Firmware HIGH 8.8
CVE-2023-45317

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. …

Mitigation only
Fix from $1,950 2023-10-26
Analog Fm Transmitter Exc5000gx Firmware MEDIUM 6.5
CVE-2023-45228

The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissi…

Mitigation only
Fix from $1,600 2023-10-26
Analog Fm Transmitter Exc5000gx Firmware CRITICAL 9.8
CVE-2023-42769

The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, b…

Mitigation only
Fix from $2,300 2023-10-26
Analog Fm Transmitter Exc5000gx Firmware HIGH 8.8
CVE-2023-41966

The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to se…

No fix yet
Fix from $1,950 2023-10-26