CVE-2023-45317

HIGHCVSS 8.8/10EPSS 0.24%

Last modified

CVE-2023-45317 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site. . EPSS estimates a 0.24% chance of exploitation in the next 30 days.

Description

The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability
0.24%

14.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SielcoAnalog Fm Transmitter Exc5000gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc120gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc300gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc1600gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc2000gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc1000gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc3000gx FirmwareAll versions
SielcoAnalog Fm Transmitter Exc30gt FirmwareAll versions
SielcoAnalog Fm Transmitter Exc300gt FirmwareAll versions
SielcoAnalog Fm Transmitter Exc100gt FirmwareAll versions
SielcoAnalog Fm Transmitter Exc5000gt FirmwareAll versions
SielcoAnalog Fm Transmitter Exc1000gt FirmwareAll versions
SielcoAnalog Fm Transmitter Exc120gt FirmwareAll versions
SielcoRadio Link Rtx19 FirmwareAll versions
SielcoRadio Link Exc19 FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-45317?
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
How severe is CVE-2023-45317?
CVE-2023-45317 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.24% probability of exploitation in the next 30 days.
How do I fix CVE-2023-45317?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-45317?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST