CVE-2023-5754: Sielco POLYECO1000 Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

Affected products

• Sielco POLYECO1000 Firmware: version 1.9.3 only; version 1.9.4 only; version 2.0.6 only; version 10.19 only
• Sielco POLYECO300 Firmware: version 2.0.0 only; version 2.0.2 only; version 10.19 only
• Sielco POLYECO500 Firmware: version 1.7.0 only; version 10.16 only

Published 2023-10-26. Last modified 2026-06-17.