Medium severity6.5NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026
CVE-2023-45228
CVE-2023-45228
Description
The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
182.12 (EXC5000GX)+ 1 more
- (no CPE)range: 2.12 (EXC5000GX)
- cpe:2.3:o:sielco:analog_fm_transmitter_exc30gt_firmware:-:*:*:*:*:*:*:*
- Sielco/Radio Linkv5Range: 2.06 (RTX19)
- cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc120gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc300gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1600gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc2000gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc3000gx_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc300gt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc100gt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:analog_fm_transmitter_exc120gt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:radio_link_rtx19_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sielco:radio_link_exc19_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.cisa.gov/news-events/ics-advisories/icsa-23-299-08nvdThird Party AdvisoryUS Government Resource
- www.sielco.org/en/contactsnvdProduct
News mentions
0No linked articles in our index yet.