Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-42769

Sielco Radio Link and Analog FM Transmitters Improper Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sielco Analog FM transmitter

Default version status: unaffected

  • 2.12 (EXC5000GX)affected
  • 2.12 (EXC120GX)affected
  • 2.11 (EXC300GX)affected
  • 2.10 (EXC1600GX)affected
  • 2.10 (EXC2000GX)affected
  • 2.08 (EXC1600GX)affected
  • 2.08 (EXC1000GX)affected
  • 2.07 (EXC3000GX)affected
  • 2.06 (EXC5000GX)affected
  • 1.7.7 (EXC30GT)affected
  • 1.7.4 (EXC300GT)affected
  • 1.7.4 (EXC100GT)affected
  • 1.7.4 (EXC5000GT)affected
  • 1.6.3 (EXC1000GT)affected
  • 1.5.4 (EXC120GT)affected

Sielco Radio Link

Default version status: unaffected

  • 2.06 (RTX19)affected
  • 2.05 (RTX19)affected
  • 2.00 (EXC19)affected
  • 1.60 (RTX19)affected
  • 1.59 (RTX19)affected
  • 1.55 (EXC19)affected

References