CVE-2023-42769 — Sielco Radio Link and Analog FM Transmitters Improper Access Control

Description (CNA)

The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.

Affected (CNA)

Vendor / product	Versions
Sielco / Analog FM transmitter	affected 2.12 (EXC5000GX); affected 2.12 (EXC120GX); affected 2.11 (EXC300GX); affected 2.10 (EXC1600GX); affected 2.10 (EXC2000GX); affected 2.08 (EXC1600GX); affected 2.08 (EXC1000GX); affected 2.07 (EXC3000GX); affected 2.06 (EXC5000GX); affected 1.7.7 (EXC30GT); affected 1.7.4 (EXC300GT); affected 1.7.4 (EXC100GT); affected 1.7.4 (EXC5000GT); affected 1.6.3 (EXC1000GT); affected 1.5.4 (EXC120GT)
Sielco / Radio Link	affected 2.06 (RTX19); affected 2.05 (RTX19); affected 2.00 (EXC19); affected 1.60 (RTX19); affected 1.59 (RTX19); affected 1.55 (EXC19)

Vendor / product

Versions

Sielco / Analog FM transmitter

affected 2.12 (EXC5000GX); affected 2.12 (EXC120GX); affected 2.11 (EXC300GX); affected 2.10 (EXC1600GX); affected 2.10 (EXC2000GX); affected 2.08 (EXC1600GX); affected 2.08 (EXC1000GX); affected 2.07 (EXC3000GX); affected 2.06 (EXC5000GX); affected 1.7.7 (EXC30GT); affected 1.7.4 (EXC300GT); affected 1.7.4 (EXC100GT); affected 1.7.4 (EXC5000GT); affected 1.6.3 (EXC1000GT); affected 1.5.4 (EXC120GT)

Sielco / Radio Link

affected 2.06 (RTX19); affected 2.05 (RTX19); affected 2.00 (EXC19); affected 1.60 (RTX19); affected 1.59 (RTX19); affected 1.55 (EXC19)

CWE

CWE-284

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
https://www.sielco.org/en/contacts

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
https://www.sielco.org/en/contacts

CISA-ADP

No English description supplied.

No references supplied.