Sielco Analog Fm Transmitter Exc1000gx Firmware
4 CVEs affecting Sielco Analog Fm Transmitter Exc1000gx Firmware. Latest disclosed: 2023-10-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-42769 | Critical | 9.8 | 2023-10-26 | The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass auth… |
CVE-2023-45317 | High | 8.8 | 2023-10-26 | The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can… |
CVE-2023-45228 | Medium | 6.5 | 2023-10-26 | The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by s… |
CVE-2023-41966 | Medium | 6.5 | 2023-10-26 | The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a par… |