CVE-2023-24500
Assigner: INCD
Published: 2023-04-17T00:00:00
State: PUBLISHED
title:  Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW
datePublic: 2023-04-17T00:00:00
descriptions: value: Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
affected: vendor: Electra
product: Electra Central AC unit
versions: version: Update to the latest version
status: affected
credits: value: Lev Aronsky, Idan Strovinsky
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT_NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
problemTypes: descriptions: type: text
description: Adjacent attacker may cause the unit to load unauthorized FW
x_generator: engine: Vulnogram 0.0.9
source: defect: ILVN-2023-0087
discovery: EXTERNAL