What’s Vulnerable › Vulnerabilities

CVE-2023-45317: Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-26 · updated 2026-06-17
• Weakness: CWE-352

Description

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Affected products

• Sielco Analog Fm Transmitter Exc1000Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc1000Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc100Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc120Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc120Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc1600Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc2000Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc3000Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc300Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc300Gx Firmware: all versions
• Sielco Analog Fm Transmitter Exc30Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc5000Gt Firmware: all versions
• Sielco Analog Fm Transmitter Exc5000Gx Firmware: all versions
• Sielco Radio Link Exc19 Firmware: all versions
• Sielco Radio Link Rtx19 Firmware: all versions

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
• https://www.sielco.org/en/contacts
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
• https://www.sielco.org/en/contacts

Get alerted when CVE-2023-45317 or the next vulnerability affects your stack