What’s Vulnerable › Vulnerabilities

CVE-2023-0451

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-26 · updated 2026-06-17
• Weakness: CWE-284

Description

Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certain database and configuration files. One such file contains tables with MD5 hashes and usernames for all defined users in the control software, including administrators and technicians.

Affected products

• Econolite EOS: all versions

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02

Get alerted when CVE-2023-0451 or the next vulnerability affects your stack