Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Polyeco500_firmware | Sielco | 1.7.0 (including) | 1.7.0 (including) |
| Polyeco500_firmware | Sielco | 10.16 (including) | 10.16 (including) |