CVE-2023-42769: Sielco Analog Fm Transmitter EXC1000GT Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.

Affected products

  • Sielco Analog Fm Transmitter EXC1000GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC1000GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC100GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC120GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC120GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC1600GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC2000GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC3000GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC300GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC300GX Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC30GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC5000GT Firmware: affected versions not specified
  • Sielco Analog Fm Transmitter EXC5000GX Firmware: affected versions not specified
  • Sielco Radio Link EXC19 Firmware: affected versions not specified
  • Sielco Radio Link RTX19 Firmware: affected versions not specified

Published 2023-10-26. Last modified 2026-06-17.