Vendors / Sielco Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 4
Exploited now Sielco records in CISA KEV No Sielco vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 4 records in Analog Fm Transmitter Exc1000gt Firmware · all components
Priority MEDIUM 51
The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01089 · Published 2023-10-26 · No fix listed CWE-284
Priority MEDIUM 40
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0029 · Published 2023-10-26 · No fix listed CWE-352
Priority LOW 39
The application suffers from a privilege escalation vulnerability.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0075 · Published 2023-10-26 · No fix listed CWE-267
Priority LOW 29
The application suffers from improper access control when editing users.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00446 · Published 2023-10-26 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
6 4 1 0 0
