Electra

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Electra records in CISA KEV

No Electra vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Central Ac Unit Firmware · all components

TI-2023-10122 CVE-2023-24501 · GHSA-7xr3-6fgq-rv6h

MEDIUM 50

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2023-04-17 No fix listed CWE-798

TI-2023-10125 CVE-2023-24504 · GHSA-c5rj-26pj-c7cr

LOW 34

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00271 Published 2023-04-17 No fix listed

TI-2023-10123 CVE-2023-24502 · GHSA-fqm3-34q3-vw23

LOW 34

Electra Central AC unit – The unit opens an AP with an easily calculated password.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00171 Published 2023-04-17 No fix listed CWE-521

TI-2023-10121 CVE-2023-24500 · GHSA-fww7-pq4g-vxx7

LOW 34

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00177 Published 2023-04-17 No fix listed CWE-494