CVE-2023-45228: Sielco Analog Fm Transmitter EXC1000GT Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with modified parameters.

Affected products

• Sielco Analog Fm Transmitter EXC1000GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC1000GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC100GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC120GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC120GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC1600GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC2000GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC3000GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC300GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC300GX Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC30GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC5000GT Firmware: affected versions not specified
• Sielco Analog Fm Transmitter EXC5000GX Firmware: affected versions not specified
• Sielco Radio Link EXC19 Firmware: affected versions not specified
• Sielco Radio Link RTX19 Firmware: affected versions not specified

Published 2023-10-26. Last modified 2026-06-17.