CVE-2023-41966
highPriorität · verfolgen · 35EPSS 0.007 · 55. PerzentilEUUSEPSS · bewertet 2026-10-27
The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationAnalog FM transmitter (EXC1000GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC1000GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC100GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC120GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC120GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC1600GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC2000GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC3000GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC300GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC300GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC30GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC5000GT)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationAnalog FM transmitter (EXC5000GX)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationRadio Link (EXC19)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts - MitigationRadio Link (RTX19)cisa_csaf_ot
Sielco has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Sielco PolyEco FM Transmitter are invited to contact Sielco customer support for additional information.
https://www.sielco.org/en/contacts
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–8.8
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (72)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-23-299-08Sielco Radio Link and Analog FM Transmitters2023-10-26icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, access restricted pages, or hijack sessions.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2023-41966/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2023.6261cnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08cnnvd
- https://www.sielco.org/en/contactscnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08enisa_euvd
- https://www.sielco.org/en/contactsenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08Third Party AdvisoryUS Government Resourcenvd
- https://www.sielco.org/en/contactsProductnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan