CVE-2023-45228
Sielco Radio Link and Analog FM Transmitters Improper Access Control
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The application suffers from improper access control when editing users.
A user with read permissions can manipulate users, passwords, and
permissions by sending a single HTTP POST request with modified
parameters.
La aplicación adolece de un control de acceso inadecuado a la hora de editar usuarios. Un usuario con permisos de lectura puede manipular usuarios, contraseñas y permisos enviando una única solicitud HTTP POST con parámetros modificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-10-25 CVE Reserved
- 2023-10-26 CVE Published
- 2024-08-02 CVE Updated
- 2024-11-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08 | Third Party Advisory | |
| https://www.sielco.org/en/contacts | Product |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" | 2.12 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" and version "2.12" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx" | 2.12 Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx" and version "2.12" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx" | 2.11 Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx" and version "2.11" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" | 2.10 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" and version "2.10" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc2000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc2000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx" | 2.10 Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx" and version "2.10" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" | 2.08 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" and version "2.08" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx" | 2.08 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx" and version "2.08" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc3000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc3000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx" | 2.07 Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx" and version "2.07" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" | 2.06 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" and version "2.06" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc30gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc30gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt" | 1.7.7 Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt" and version "1.7.7" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt" and version "1.7.4" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc100gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc100gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt" and version "1.7.4" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt" and version "1.7.4" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt" | 1.6.3 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt" and version "1.6.3" | - |
Safe
|
| Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt" | 1.5.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt" and version "1.5.4" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 2.06 Search vendor "Sielco" for product "Radio Link Rtx19" and version "2.06" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 2.05 Search vendor "Sielco" for product "Radio Link Rtx19" and version "2.05" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Exc19 Firmware Search vendor "Sielco" for product "Radio Link Exc19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Exc19 Search vendor "Sielco" for product "Radio Link Exc19" | 2.00 Search vendor "Sielco" for product "Radio Link Exc19" and version "2.00" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 1.60 Search vendor "Sielco" for product "Radio Link Rtx19" and version "1.60" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 1.59 Search vendor "Sielco" for product "Radio Link Rtx19" and version "1.59" | - |
Safe
|
| Sielco Search vendor "Sielco" | Radio Link Exc19 Firmware Search vendor "Sielco" for product "Radio Link Exc19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Exc19 Search vendor "Sielco" for product "Radio Link Exc19" | 1.55 Search vendor "Sielco" for product "Radio Link Exc19" and version "1.55" | - |
Safe
|