CVE-2023-41966 - CVE House
Back to Database
Status published Medium CVE-2023-41966

Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions

Vulnerability Description

The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-41966

Credits & Attribution

No credits recorded in the NVD database.

References

More from Sielco

View All →
CVE-2023-45317
Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery
High 8.8
CVE-2023-45228
Sielco Radio Link and Analog FM Transmitters Improper Access Control
Medium 6.5
CVE-2023-42769
Sielco Radio Link and Analog FM Transmitters Improper Access Control
Critical 9.8

Affected Vendor

Affected Software

Analog FM transmitter, Radio Link
Vulnerable Versions:
2.12 (EXC5000GX), 2.12 (EXC120GX), 2.11 (EXC300GX), 2.10 (EXC1600GX), 2.10 (EXC2000GX), 2.08 (EXC1600GX), 2.08 (EXC1000GX), 2.07 (EXC3000GX), 2.06 (EXC5000GX), 1.7.7 (EXC30GT), 1.7.4 (EXC300GT), 1.7.4 (EXC100GT), 1.7.4 (EXC5000GT), 1.6.3 (EXC1000GT), 1.5.4 (EXC120GT), 2.06 (RTX19), 2.05 (RTX19), 2.00 (EXC19), 1.60 (RTX19), 1.59 (RTX19), 1.55 (EXC19)

Timeline

Official Publish: October 26th, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-267

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.