CVE-2023-24500

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-494

Affected software

VendorProductVersions
ElectraElectra Central AC unitUpdate to the latest version

References

Timeline

Published
Apr 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-245019.8Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.CVE-2023-245026.5Electra Central AC unit – The unit opens an AP with an easily calculated password.CVE-2023-245036.5Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.CVE-2023-245046.5Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.CVE-2023-245057.5Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.CVE-2023-245067.5Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.CVE-2023-245079.8AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request.CVE-2023-245089.6Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote sCVE-2023-245097.8On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configurCVE-2023-24519.8A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown procCVE-2023-245107.5On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.CVE-2023-245117.5On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This