Sielco Radio Link RTX19 Firmware vulnerabilities

4 CVEs affecting Sielco Radio Link RTX19 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-45317, published 2023-10-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-42769, published 2023-10-26. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the…
CVE-2023-41966, published 2023-10-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.
CVE-2023-45228, published 2023-10-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST request with…
CVE-2023-45317, published 2023-10-26. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions…