VYPR
← All advisories
High severity7.5NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026

CVE-2023-46663

CVE-2023-46663

Description

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Sielcosistemi/Polyeco1000 Firmware4 versions
    cpe:2.3:o:sielco:polyeco1000_firmware:1.9.3:*:*:*:cpu:*:*:*+ 3 more
    • cpe:2.3:o:sielco:polyeco1000_firmware:1.9.3:*:*:*:cpu:*:*:*
    • cpe:2.3:o:sielco:polyeco1000_firmware:1.9.4:*:*:*:cpu:*:*:*
    • cpe:2.3:o:sielco:polyeco1000_firmware:10.19:*:*:*:fpga:*:*:*
    • cpe:2.3:o:sielco:polyeco1000_firmware:2.0.6:*:*:*:cpu:*:*:*
  • Sielcosistemi/Polyeco300 Firmware3 versions
    cpe:2.3:o:sielco:polyeco300_firmware:10.19:*:*:*:fpga:*:*:*+ 2 more
    • cpe:2.3:o:sielco:polyeco300_firmware:10.19:*:*:*:fpga:*:*:*
    • cpe:2.3:o:sielco:polyeco300_firmware:2.0.0:*:*:*:cpu:*:*:*
    • cpe:2.3:o:sielco:polyeco300_firmware:2.0.2:*:*:*:cpu:*:*:*
  • Sielcosistemi/Polyeco500 Firmware2 versions
    cpe:2.3:o:sielco:polyeco500_firmware:1.7.0:*:*:*:cpu:*:*:*+ 1 more
    • cpe:2.3:o:sielco:polyeco500_firmware:1.7.0:*:*:*:cpu:*:*:*
    • cpe:2.3:o:sielco:polyeco500_firmware:10.16:*:*:*:fpga:*:*:*
  • Sielcosistemi/PolyEco1000llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: CPU:2.0.6 FPGA:10.19

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.