TI-2023-10122 CVE-2023-24501 · GHSA-7xr3-6fgq-rv6h
Hard-coded credentials in Electra Central AC unit
Priority MEDIUM 50
Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.
Electra
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Electra records in CISA KEVNo Electra vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-10125 CVE-2023-24504 · GHSA-c5rj-26pj-c7cr
Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized…
Priority LOW 34
Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.
TI-2023-10124 CVE-2023-24503 · GHSA-m3qp-4rm3-pr3q
Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW
Priority LOW 34
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
TI-2023-10123 CVE-2023-24502 · GHSA-fqm3-34q3-vw23
Electra Central AC unit – Easily calculated password
Priority LOW 34
Electra Central AC unit – The unit opens an AP with an easily calculated password.
TI-2023-10121 CVE-2023-24500 · GHSA-fww7-pq4g-vxx7
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW
Priority LOW 34
Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.