PT-2023-28196 · Sielco · Analog Fm Transmitter+12

Published 2023-10-26 · Updated 2023-11-07 · CVE-2023-41966

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The application suffers from a privilege escalation issue. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-267

Related Identifiers

CVE-2023-41966

Affected Products

Analog Fm Transmitter

Radio Link

Analog Fm Transmitter Exc1000Gt Firmware

Analog Fm Transmitter Exc100Gt Firmware

Analog Fm Transmitter Exc120Gt Firmware

Analog Fm Transmitter Exc1600Gx Firmware

Analog Fm Transmitter Exc2000Gx Firmware

Analog Fm Transmitter Exc3000Gx Firmware

Analog Fm Transmitter Exc300Gt Firmware

Analog Fm Transmitter Exc30Gt Firmware

Analog Fm Transmitter Exc5000Gt Firmware

Radio Link Exc19 Firmware

Radio Link Rtx19 Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-41966 · Security Note
• https://sielco.org/en/contacts · Note
• https://twitter.com/CVEnew/status/1717581702824882478 · Twitter Post
• https://t.me/cibsecurity/72979 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-299-08 · Note
• https://twitter.com/VulmonFeeds/status/1717617410226680161 · Twitter Post