CVE-2023-46663

🗓️ 26 Oct 2023 20:02:24Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 62 Views🌐 WEB

Sielco PolyEco1000 authorization bypass vulnerabilit

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the web interface of the Sielco PolyEco1000 digital FM transmitter’s microprogramming software, related to access control deficiencies, allows attackers to perform arbitrary actions.	1 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-46663	27 Oct 202300:17	–	circl
CNNVD	Sielco PolyEco1000 Security Vulnerability	26 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-46663 Improper Access Control in Sielco PolyEco1000	26 Oct 202320:02	–	cvelist
EUVD	EUVD-2023-50854	3 Oct 202520:07	–	euvd
ICS	Sielco PolyEco FM Transmitter	26 Oct 202306:00	–	ics
NVD	CVE-2023-46663	26 Oct 202321:15	–	nvd
OSV	CVE-2023-46663	26 Oct 202321:15	–	osv
Prion	Authorization	26 Oct 202321:15	–	prion
Positive Technologies	PT-2023-6584 · Sielco · Sielco Polyeco1000	26 Oct 202300:00	–	ptsecurity

NVD

Vulners

Node

AND

sielco polyeco500_firmwareMatch1.7.0cpu

sielco polyeco500_firmwareMatch10.16fpga

sielco polyeco500Match-

Node

AND

sielco polyeco300_firmwareMatch2.0.0cpu

sielco polyeco300_firmwareMatch2.0.2cpu

sielco polyeco300_firmwareMatch10.19fpga

sielco polyeco300Match-

Node

AND

sielco polyeco1000_firmwareMatch1.9.3cpu

sielco polyeco1000_firmwareMatch1.9.4cpu

sielco polyeco1000_firmwareMatch2.0.6cpu

sielco polyeco1000_firmwareMatch10.19fpga

sielco polyeco1000Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "PolyEco1000",
    "vendor": "Sielco ",
    "versions": [
      {
        "status": "affected",
        "version": "CPU:2.0.6 FPGA:10.19"
      },
      {
        "status": "affected",
        "version": "CPU:1.9.4 FPGA:10.19"
      },
      {
        "status": "affected",
        "version": "CPU:1.9.3 FPGA:10.19"
      },
      {
        "status": "affected",
        "version": "CPU:1.7.0 FPGA:10.16"
      },
      {
        "status": "affected",
        "version": "CPU:2.0.2 FPGA:10.19"
      },
      {
        "status": "affected",
        "version": "CPU:2.0.0 FPGA:10.19"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-299-07

Parameter	Position	Path	Description	CWE
rds_inta	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_intb	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_pi	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_ps	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_rta	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_rtb	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_rtt	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_tp	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_ta	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284
rds_pty	request body	/protect/rds.htm	Improper access control vulnerability allowing bypass of authorization to manipulate RDS text display via POST to rds.htm	CWE-284

17 Jun 2026 06:31Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5 - 8.1

EPSS0.00442

SSVC

CWE-284