Electra-air Central Ac Unit Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Electra-air Central Ac Unit Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-24501 — CVSS 9.8 (critical): Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.
• CVE-2023-24500 — CVSS 7.5 (high): Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.
• CVE-2023-24502 — CVSS 7.5 (high): Electra Central AC unit – The unit opens an AP with an easily calculated password.
• CVE-2023-24504 — CVSS 7.5 (high): Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.