Electra vulnerabilities

Products

• Electra Central AC unit 3
• Central AC unit 1
• OSK201 1

Latest Electra CVEs

Newest publication first

1. CVE-2023-24501 Electra Central AC unit – Hardcoded Credentials

   Published 2023-04-17

   Critical·CVSS 9.8

   Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.

2. CVE-2023-24503 Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW

   Published 2023-04-17

   Medium·CVSS 6.5

   Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

3. CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

   Published 2023-04-17

   Medium·CVSS 6.5

   Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

4. CVE-2023-24500 Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW

   Published 2023-04-17

   Medium·CVSS 6.5

   Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

5. CVE-2023-24502 Electra Central AC unit – Easily calculated password

   Published 2023-04-17

   Medium·CVSS 6.5

   Electra Central AC unit – The unit opens an AP with an easily calculated password.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.