Lucene search
IcscertCVELIST:CVE-2023-41966HistoryOct 26, 2023 - 4:21 p.m.
CVE-2023-41966 Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions
2023-10-2616:21:56
CWE-267
icscert
www.cve.org
sielco radio link
privilege escalation
http post
vulnerability
privilege defined
analog fm transmitters
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.3%
The application suffers from a privilege escalation vulnerability. A
user with read permissions can elevate privileges by sending a HTTP POST
to set a parameter.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Analog FM transmitter",
"vendor": "Sielco",
"versions": [
{
"status": "affected",
"version": "2.12 (EXC5000GX)"
},
{
"status": "affected",
"version": "2.12 (EXC120GX)"
},
{
"status": "affected",
"version": "2.11 (EXC300GX)"
},
{
"status": "affected",
"version": "2.10 (EXC1600GX)"
},
{
"status": "affected",
"version": "2.10 (EXC2000GX)"
},
{
"status": "affected",
"version": "2.08 (EXC1600GX)"
},
{
"status": "affected",
"version": "2.08 (EXC1000GX)"
},
{
"status": "affected",
"version": "2.07 (EXC3000GX)"
},
{
"status": "affected",
"version": "2.06 (EXC5000GX)"
},
{
"status": "affected",
"version": "1.7.7 (EXC30GT)"
},
{
"status": "affected",
"version": "1.7.4 (EXC300GT)"
},
{
"status": "affected",
"version": "1.7.4 (EXC100GT)"
},
{
"status": "affected",
"version": "1.7.4 (EXC5000GT)"
},
{
"status": "affected",
"version": "1.6.3 (EXC1000GT)"
},
{
"status": "affected",
"version": "1.5.4 (EXC120GT)"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Radio Link",
"vendor": "Sielco ",
"versions": [
{
"status": "affected",
"version": "2.06 (RTX19)"
},
{
"status": "affected",
"version": "2.05 (RTX19)"
},
{
"status": "affected",
"version": "2.00 (EXC19)"
},
{
"status": "affected",
"version": "1.60 (RTX19)"
},
{
"status": "affected",
"version": "1.59 (RTX19)"
},
{
"status": "affected",
"version": "1.55 (EXC19)"
}
]
}
]Related
cve
cve
CVE-2023-41966
2023-10-26 17:15:08
zeroscience
zeroscience
Sielco Radio Link 2.06 Remote Privilege Escalation
2023-03-30 00:00:00
Sielco Analog FM Transmitter 2.12 Remote Privilege Escalation
2023-03-28 00:00:00
prion
prion
Privilege escalation
2023-10-26 17:15:00
nvd
nvd
CVE-2023-41966
2023-10-26 17:15:08
ics
ics
Sielco Radio Link and Analog FM Transmitters
2023-10-26 12:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.3%
Related for CVELIST:CVE-2023-41966