PT-2023-29494 · Sielco · Analog Fm Transmitter+12

Published 2023-10-26 · Updated 2023-11-07 · CVE-2023-45317

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-45317

Affected Products

Analog Fm Transmitter

Radio Link

Analog Fm Transmitter Exc1000Gt Firmware

Analog Fm Transmitter Exc100Gt Firmware

Analog Fm Transmitter Exc120Gt Firmware

Analog Fm Transmitter Exc1600Gx Firmware

Analog Fm Transmitter Exc2000Gx Firmware

Analog Fm Transmitter Exc3000Gx Firmware

Analog Fm Transmitter Exc300Gt Firmware

Analog Fm Transmitter Exc30Gt Firmware

Analog Fm Transmitter Exc5000Gt Firmware

Radio Link Exc19 Firmware

Radio Link Rtx19 Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-45317 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-299-08 · Note
• https://twitter.com/VulmonFeeds/status/1717615130098258427 · Twitter Post
• https://sielco.org/en/contacts · Note
• https://t.me/cibsecurity/72978 · Telegram Post
• https://twitter.com/CVEnew/status/1717581706469777444 · Twitter Post