CVE-2023-24501criticalCWE-798

CVE-2023-24501: critical vulnerability in Electra Central AC unit

Electra Central AC unit – Hardcoded Credentials

Published · Updated

Follow this CVE+ Monitor Electra Central AC unit

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.6%
Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Electra · Electra Central AC unit
Related CVEs — Electra Central AC unit

In the same product, most dangerous first.

CVE-2023-24500HIGH Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FWEPSS 0.2%CVE-2023-24502HIGH Electra Central AC unit – Easily calculated passwordEPSS 0.2%