PT-2023-29464 · Sielco · Analog Fm Transmitter+12

Published 2023-10-26 · Updated 2023-11-07 · CVE-2023-45228

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Application (affected versions not specified)

Description The application has an issue with improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-45228

Affected Products

Analog Fm Transmitter

Radio Link

Analog Fm Transmitter Exc1000Gt Firmware

Analog Fm Transmitter Exc100Gt Firmware

Analog Fm Transmitter Exc120Gt Firmware

Analog Fm Transmitter Exc1600Gx Firmware

Analog Fm Transmitter Exc2000Gx Firmware

Analog Fm Transmitter Exc3000Gx Firmware

Analog Fm Transmitter Exc300Gt Firmware

Analog Fm Transmitter Exc30Gt Firmware

Analog Fm Transmitter Exc5000Gt Firmware

Radio Link Exc19 Firmware

Radio Link Rtx19 Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-45228 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-299-08 · Note
• https://t.me/cibsecurity/72992 · Telegram Post
• https://sielco.org/en/contacts · Note
• https://twitter.com/VulmonFeeds/status/1717617156764860637 · Twitter Post
• https://twitter.com/CVEnew/status/1717581704192197109 · Twitter Post