Vulnerabilities

TI-2023-10125 CVE-2023-24504 · GHSA-c5rj-26pj-c7cr

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized…

LOW 34

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00271 Published 2023-04-17 No fix listed

TI-2023-10124 CVE-2023-24503 · GHSA-m3qp-4rm3-pr3q

LOW 34

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00177 Published 2023-04-17 No fix listed CWE-494

TI-2023-10123 CVE-2023-24502 · GHSA-fqm3-34q3-vw23

LOW 34

Electra Central AC unit – The unit opens an AP with an easily calculated password.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00171 Published 2023-04-17 No fix listed CWE-521

TI-2023-10122 CVE-2023-24501 · GHSA-7xr3-6fgq-rv6h

MEDIUM 50

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2023-04-17 No fix listed CWE-798

TI-2023-10121 CVE-2023-24500 · GHSA-fww7-pq4g-vxx7

LOW 34

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00177 Published 2023-04-17 No fix listed CWE-494