CVE-2023-46663

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-466649.1Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based onCVE-2023-466659.8Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gainCVE-2023-466666.5An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python CoCVE-2023-466678.1An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s logCVE-2023-466689.1If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and CVE-2023-466697.1Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiCVE-2023-46674.8The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicCVE-2023-466716.5An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has releasCVE-2023-466725.5An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisitCVE-2023-466737.5It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when CVE-2023-466747.8An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could havCVE-2023-466756.5An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event whe
CVE-2023-46663: High severity, CVSS 8.1 | Vulnix