Read the docs

Econolite

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Econolite records in CISA KEV

No Econolite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Eos 2 records MEDIUM

Records

2 records in Eos · all components

TI-2023-00427 CVE-2023-0452 · GHSA-48vq-44vm-p326

Broken or risky cryptographic algorithm in Econolite EOS

Priority MEDIUM 50

Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00553 Published 2023-01-26 Fixed in 3.2.23 CWE-328
TI-2023-00426 CVE-2023-0451 · GHSA-q8j4-3fxm-87xm

Improper access control in Econolite EOS

Priority MEDIUM 40

Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certain database and configuration files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00848 Published 2023-01-26 Fixed in 3.2.23 CWE-284
Open these records in search →