CVE-2023-45317

moderate-risk
Published 2023-10-26

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Do I need to act?

-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (15)

Analog Fm Transmitter Exc5000Gx Firmware
Analog Fm Transmitter Exc120Gx Firmware
Analog Fm Transmitter Exc300Gx Firmware
Analog Fm Transmitter Exc1600Gx Firmware
Analog Fm Transmitter Exc2000Gx Firmware
Analog Fm Transmitter Exc1000Gx Firmware
Analog Fm Transmitter Exc3000Gx Firmware
Analog Fm Transmitter Exc30Gt Firmware
Analog Fm Transmitter Exc300Gt Firmware
Analog Fm Transmitter Exc100Gt Firmware
Analog Fm Transmitter Exc5000Gt Firmware
Analog Fm Transmitter Exc1000Gt Firmware
Analog Fm Transmitter Exc120Gt Firmware
Radio Link Rtx19 Firmware
Radio Link Exc19 Firmware

Affected Vendors

Sielco

References (4)

Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
Product https://www.sielco.org/en/contacts
Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
Product https://www.sielco.org/en/contacts
48
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 0/34 · Minimal
Exposure 18/34 · Moderate