high8.8
CVE-2023-45317
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.
Impact
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sielco | Analog Fm Transmitter Exc5000gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc120gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc300gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc1600gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc2000gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc1000gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc3000gx Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc30gt Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc300gt Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc100gt Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc5000gt Firmware | All versions |
| Sielco | Analog Fm Transmitter Exc1000gt Firmware | All versions |