CVE-2023-5754

Summary

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

Affected Software

VendorProductVersion RangeStatus
SielcoPolyEco1000CPU:2.0.6 FPGA:10.19affected
SielcoPolyEco1000CPU:1.9.4 FPGA:10.19affected
SielcoPolyEco1000CPU:1.9.3 FPGA:10.19affected
SielcoPolyEco1000CPU:1.7.0 FPGA:10.16affected
SielcoPolyEco1000CPU:2.0.2 FPGA:10.19affected
SielcoPolyEco1000CPU:2.0.0 FPGA:10.19affected

Weaknesses

  • CWE-307: CWE-307 Improper Restriction of Excessive Authentication Attempts

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References