CVE-2023-45317CWE-352

Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery

High · published October 26, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

The application interface allows users to perform certain actions via

HTTP requests without performing any validity checks to verify the

requests. This can be exploited to perform certain actions with

administrative privileges if a logged-in user visits a malicious web

site.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-10-26T16:17Z
EPSS history
Timeline
  • 26 OCT 16:17Z
    Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery
    cvelistv5