← Database

CVE-2023-0897

HIGH CVSS: 8.8 Published: 2023-10-26 Modified: 2026-06-17

Description

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests.

Affected Platforms

Sielco Polyeco1000Sielco Polyeco500 FirmwareSielco Polyeco1000 FirmwareSielco Polyeco300Sielco Polyeco500Sielco Polyeco300 Firmware

Weakness Type

CWE-384, CWE-384

References