CVE-2023-45317
Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The application interface allows users to perform certain actions via
HTTP requests without performing any validity checks to verify the
requests. This can be exploited to perform certain actions with
administrative privileges if a logged-in user visits a malicious web
site.
La interfaz de la aplicación permite a los usuarios realizar ciertas acciones a través de solicitudes HTTP sin realizar ninguna verificación de validez para verificar las solicitudes. Esto se puede aprovechar para realizar determinadas acciones con privilegios administrativos si un usuario que ha iniciado sesión visita un sitio web malicioso.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-10-25 CVE Reserved
- 2023-10-26 CVE Published
- 2024-08-02 CVE Updated
- 2024-11-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08 | Third Party Advisory | |
https://www.sielco.org/en/contacts | Product |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" | 2.12 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" and version "2.12" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx" | 2.12 Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gx" and version "2.12" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx" | 2.11 Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gx" and version "2.11" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" | 2.10 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" and version "2.10" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc2000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc2000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx" | 2.10 Search vendor "Sielco" for product "Analog Fm Transmitter Exc2000gx" and version "2.10" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1600gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" | 2.08 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1600gx" and version "2.08" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx" | 2.08 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gx" and version "2.08" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc3000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc3000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx" | 2.07 Search vendor "Sielco" for product "Analog Fm Transmitter Exc3000gx" and version "2.07" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gx Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" | 2.06 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gx" and version "2.06" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc30gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc30gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt" | 1.7.7 Search vendor "Sielco" for product "Analog Fm Transmitter Exc30gt" and version "1.7.7" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc300gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc300gt" and version "1.7.4" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc100gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc100gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc100gt" and version "1.7.4" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc5000gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt" | 1.7.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc5000gt" and version "1.7.4" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc1000gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt" | 1.6.3 Search vendor "Sielco" for product "Analog Fm Transmitter Exc1000gt" and version "1.6.3" | - |
Safe
|
Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gt Firmware Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Analog Fm Transmitter Exc120gt Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt" | 1.5.4 Search vendor "Sielco" for product "Analog Fm Transmitter Exc120gt" and version "1.5.4" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 2.06 Search vendor "Sielco" for product "Radio Link Rtx19" and version "2.06" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 2.05 Search vendor "Sielco" for product "Radio Link Rtx19" and version "2.05" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Exc19 Firmware Search vendor "Sielco" for product "Radio Link Exc19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Exc19 Search vendor "Sielco" for product "Radio Link Exc19" | 2.00 Search vendor "Sielco" for product "Radio Link Exc19" and version "2.00" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 1.60 Search vendor "Sielco" for product "Radio Link Rtx19" and version "1.60" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Rtx19 Firmware Search vendor "Sielco" for product "Radio Link Rtx19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Rtx19 Search vendor "Sielco" for product "Radio Link Rtx19" | 1.59 Search vendor "Sielco" for product "Radio Link Rtx19" and version "1.59" | - |
Safe
|
Sielco Search vendor "Sielco" | Radio Link Exc19 Firmware Search vendor "Sielco" for product "Radio Link Exc19 Firmware" | - | - |
Affected
| in | Sielco Search vendor "Sielco" | Radio Link Exc19 Search vendor "Sielco" for product "Radio Link Exc19" | 1.55 Search vendor "Sielco" for product "Radio Link Exc19" and version "1.55" | - |
Safe
|