CVE-2023-45228
Sielco Radio Link and Analog FM Transmitters Improper Access Control
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Sielco Radio Link and Analog FM Transmitters Improper Access Control
| Assigner | icscert |
| Reserved | 2023-10-25 |
| Published | 2023-10-26 |
| Updated | 2024-08-02 |
The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08
https://www.sielco.org/en/contacts
