CVE-2023-45317 Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery
Attackers can perform administrative actions on Sielco radio link and FM transmitters by tricking logged-in users into visiting malicious sites.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-45317?
CVE-2023-45317 is a high-severity vulnerability in Sielco Analog FM transmitter, published on 26 Oct 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Weakness: CWE-352
Which versions are affected by CVE-2023-45317?
It affects 15 products.
Products include Sielco Analog Fm Transmitter Exc1000gt Firmware, Sielco Analog Fm Transmitter Exc1000gx Firmware, Sielco Analog Fm Transmitter Exc100gt Firmware, Sielco Analog Fm Transmitter Exc120gt Firmware, Sielco Analog Fm Transmitter Exc120gx Firmware, Sielco Analog Fm Transmitter Exc1600gx Firmware and 9 more.
How do I fix CVE-2023-45317?
No fix has been published for CVE-2023-45317 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-45317 being exploited?
There is no known exploitation of CVE-2023-45317 in the wild and no public exploit code.
Other vulnerabilities in Sielco Analog FM transmitter
Sources
Also known as GHSA-f6g6-wgf5-4jm6.