What’s Vulnerable › Vulnerabilities

CVE-2023-46663: Improper Access Control in Sielco PolyEco1000

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-26 · updated 2026-06-17
• Weakness: CWE-284

Description

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

Affected products

• Sielco Polyeco1000 Firmware: 1.9.3, 1.9.4, 2.0.6, 10.19
• Sielco Polyeco300 Firmware: 2.0.0, 2.0.2, 10.19
• Sielco Polyeco500 Firmware: 1.7.0, 10.16

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07

Get alerted when CVE-2023-46663 or the next vulnerability affects your stack