CVE-2023-45317highCWE-352

CVE-2023-45317: high-severity vulnerability in Sielco Radio Link

Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery

Published · Updated

Follow this CVE+ Monitor Analog FM transmitter+ Monitor Radio Link

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.3%
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Sielco · Analog FM transmitterSielco · Radio Link
Related CVEs — Sielco Radio Link

In the same product, most dangerous first.

CVE-2023-42769CRITICALSielco Radio Link and Analog FM Transmitters Improper Access ControlEPSS 1.1%CVE-2023-41966MEDIUMSielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe ActionsEPSS 0.8%CVE-2023-45228MEDIUMSielco Radio Link and Analog FM Transmitters Improper Access ControlEPSS 0.4%