Sielco Radio Link and Analog FM Transmitters Improper Access Control

6.5 CVSS

Vulnerability Description

The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45228

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Sielco

View All →

CVE-2023-45317

Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery

High 8.8

CVE-2023-42769

Sielco Radio Link and Analog FM Transmitters Improper Access Control

Critical 9.8

CVE-2023-41966

Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions

Medium 6.5

Affected Vendor

Sielco

View all reports →

Affected Software

Analog FM transmitter, Radio Link

Vulnerable Versions:

2.12 (EXC5000GX), 2.12 (EXC120GX), 2.11 (EXC300GX), 2.10 (EXC1600GX), 2.10 (EXC2000GX), 2.08 (EXC1600GX), 2.08 (EXC1000GX), 2.07 (EXC3000GX), 2.06 (EXC5000GX), 1.7.7 (EXC30GT), 1.7.4 (EXC300GT), 1.7.4 (EXC100GT), 1.7.4 (EXC5000GT), 1.6.3 (EXC1000GT), 1.5.4 (EXC120GT), 2.06 (RTX19), 2.05 (RTX19), 2.00 (EXC19), 1.60 (RTX19), 1.59 (RTX19), 1.55 (EXC19)