CVE-2023-0897: Sielco POLYECO1000 Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests.

Affected products

• Sielco POLYECO1000 Firmware: version 1.9.3 only; version 1.9.4 only; version 2.0.6 only; version 10.19 only
• Sielco POLYECO300 Firmware: version 2.0.0 only; version 2.0.2 only; version 10.19 only
• Sielco POLYECO500 Firmware: version 1.7.0 only; version 10.16 only

Published 2023-10-26. Last modified 2026-06-17.