Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery

8.8 CVSS

Vulnerability Description

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45317

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Sielco

View All →

CVE-2023-45228

Sielco Radio Link and Analog FM Transmitters Improper Access Control

Medium 6.5

CVE-2023-42769

Sielco Radio Link and Analog FM Transmitters Improper Access Control

Critical 9.8

CVE-2023-41966

Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions

Medium 6.5

Affected Vendor

Sielco

View all reports →

Affected Software

Analog FM transmitter, Radio Link

Vulnerable Versions:

2.12 (EXC5000GX), 2.12 (EXC120GX), 2.11 (EXC300GX), 2.10 (EXC1600GX), 2.10 (EXC2000GX), 2.08 (EXC1600GX), 2.08 (EXC1000GX), 2.07 (EXC3000GX), 2.06 (EXC5000GX), 1.7.7 (EXC30GT), 1.7.4 (EXC300GT), 1.7.4 (EXC100GT), 1.7.4 (EXC5000GT), 1.6.3 (EXC1000GT), 1.5.4 (EXC120GT), 2.06 (RTX19), 2.05 (RTX19), 2.00 (EXC19), 1.60 (RTX19), 1.59 (RTX19), 1.55 (EXC19)