Sielco PolyEco FM Transmitter

🗓️ 26 Oct 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 50 Views

Sielco PolyEco1000 FM Transmitter vulnerable to session hijack, weak administrative credentials, improper access control.

Reporter	Title	Published	Views	Family All 85
BDU FSTEC	The vulnerability of the web interface of the Sielco PolyEco1000 digital FM transmitter’s microprogramming software, related to access control deficiencies, allows attackers to perform arbitrary actions.	1 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software lies in the insufficient limitation on authentication attempts, allowing a intruder to gain full control over the system.	1 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	1 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software, related to access control deficiencies, allows a intruder to gain access to the device with administrator rights.	1 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software, due to lack of access control, allows intruders to enhance their privileges and gain unauthorized access to the device.	1 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-0897	27 Oct 202300:18	–	circl
Circl	CVE-2023-46661	27 Oct 202300:18	–	circl
Circl	CVE-2023-46662	27 Oct 202300:18	–	circl
Circl	CVE-2023-46663	27 Oct 202300:17	–	circl
Circl	CVE-2023-46664	27 Oct 202300:18	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-299-07.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-299-07
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

26 Oct 2023 06:00Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.00143

SSVC

sielco polyeco1000 fm transmitter session hijack weak credentials improper access control vulnerabilities cvss cve-2023-0897 cve-2023-5754 cve-2023-46661 cve-2023-46662 cve-2023-46663