Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-0451

Econolite EOS versions prior to 3.2.23 lack a password

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certain database and configuration files. One such file contains tables with MD5 hashes and usernames for all defined users in the control software, including administrators and technicians.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Econolite EOS

Default version status: unaffected

  • 0 to < 3.2.23affected

References