{"id":"CVE-2023-41966","state":"PUBLISHED","title":"Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions","description":"\n\n\nThe application suffers from a privilege escalation vulnerability. A \nuser with read permissions can elevate privileges by sending a HTTP POST\n to set a parameter.\n\n\n\n\n\n\n\n","publishedAt":"2023-10-26T16:21:56.412Z","updatedAt":"2025-01-16T21:28:02.298Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","source":"icscert"},"assigner":"icscert","products":["Sielco Analog FM transmitter","Sielco  Radio Link"],"affected":[{"vendor":"Sielco","product":"Analog FM transmitter","defaultStatus":"unaffected","versions":[{"version":"2.12 (EXC5000GX)","status":"affected"},{"version":"2.12 (EXC120GX)","status":"affected"},{"version":"2.11 (EXC300GX)","status":"affected"},{"version":"2.10 (EXC1600GX)","status":"affected"},{"version":"2.10 (EXC2000GX)","status":"affected"},{"version":"2.08 (EXC1600GX)","status":"affected"},{"version":"2.08 (EXC1000GX)","status":"affected"},{"version":"2.07 (EXC3000GX)","status":"affected"},{"version":"2.06 (EXC5000GX)","status":"affected"},{"version":"1.7.7 (EXC30GT)","status":"affected"},{"version":"1.7.4 (EXC300GT)","status":"affected"},{"version":"1.7.4 (EXC100GT)","status":"affected"},{"version":"1.7.4 (EXC5000GT)","status":"affected"},{"version":"1.6.3 (EXC1000GT)","status":"affected"},{"version":"1.5.4 (EXC120GT)","status":"affected"}]},{"vendor":"Sielco ","product":"Radio Link","defaultStatus":"unaffected","versions":[{"version":"2.06 (RTX19)","status":"affected"},{"version":"2.05 (RTX19)","status":"affected"},{"version":"2.00 (EXC19)","status":"affected"},{"version":"1.60 (RTX19)","status":"affected"},{"version":"1.59 (RTX19)","status":"affected"},{"version":"1.55 (EXC19)","status":"affected"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08","https://www.sielco.org/en/contacts"],"weaknesses":["CWE-267"],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/41xxx/CVE-2023-41966.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-41966","state":"PUBLISHED","datePublished":"2023-10-26T16:21:56.412Z","dateUpdated":"2025-01-16T21:28:02.298Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2023-10-25T15:23:55.519Z"},"containers":{"cna":{"title":"Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions","descriptions":[{"lang":"en","value":"\n\n\nThe application suffers from a privilege escalation vulnerability. A \nuser with read permissions can elevate privileges by sending a HTTP POST\n to set a parameter.\n\n\n\n\n\n\n\n"}],"affected":[{"vendor":"Sielco","product":"Analog FM transmitter","defaultStatus":"unaffected","versions":[{"version":"2.12 (EXC5000GX)","status":"affected"},{"version":"2.12 (EXC120GX)","status":"affected"},{"version":"2.11 (EXC300GX)","status":"affected"},{"version":"2.10 (EXC1600GX)","status":"affected"},{"version":"2.10 (EXC2000GX)","status":"affected"},{"version":"2.08 (EXC1600GX)","status":"affected"},{"version":"2.08 (EXC1000GX)","status":"affected"},{"version":"2.07 (EXC3000GX)","status":"affected"},{"version":"2.06 (EXC5000GX)","status":"affected"},{"version":"1.7.7 (EXC30GT)","status":"affected"},{"version":"1.7.4 (EXC300GT)","status":"affected"},{"version":"1.7.4 (EXC100GT)","status":"affected"},{"version":"1.7.4 (EXC5000GT)","status":"affected"},{"version":"1.6.3 (EXC1000GT)","status":"affected"},{"version":"1.5.4 (EXC120GT)","status":"affected"}]},{"vendor":"Sielco ","product":"Radio Link","defaultStatus":"unaffected","versions":[{"version":"2.06 (RTX19)","status":"affected"},{"version":"2.05 (RTX19)","status":"affected"},{"version":"2.00 (EXC19)","status":"affected"},{"version":"1.60 (RTX19)","status":"affected"},{"version":"1.59 (RTX19)","status":"affected"},{"version":"1.55 (EXC19)","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08"},{"url":"https://www.sielco.org/en/contacts"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-267","description":"CWE-267 Privilege Defined With Unsafe Actions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-10-26T16:21:56.412Z"},"datePublic":"2023-10-26T16:02:00.000Z","source":{"discovery":"EXTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\nSielco has not responded to requests to work with CISA to mitigate these\n vulnerabilities. Users of affected versions of Sielco PolyEco FM \nTransmitter are invited to contact Sielco <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.sielco.org/en/contacts\">customer support</a>&nbsp;for additional information.\n\n<br>"}],"value":"Sielco has not responded to requests to work with CISA to mitigate these\n vulnerabilities. Users of affected versions of Sielco PolyEco FM \nTransmitter are invited to contact Sielco  customer support https://www.sielco.org/en/contacts  for additional information.\n\n\n"}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08","tags":["x_transferred"]},{"url":"https://www.sielco.org/en/contacts","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:09:49.582Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-16T21:18:51.607180Z","id":"CVE-2023-41966","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-16T21:28:02.298Z"}}]}}}