Sielco Radio Link and Analog FM Transmitters Improper Access Control
Priority MEDIUM 51CWE-284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01089 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Sielco | Analog FM transmitter | 2.12 (EXC5000GX); 2.12 (EXC120GX); 2.11 (EXC300GX); 2.10 (EXC1600GX); 2.10 (EXC2000GX); 2.08 (EXC1600GX); 2.08 (EXC1000GX); 2.07 (EXC3000GX); 2.06 (EXC5000GX); 1.7.7 (EXC30GT); 1.7.4 (EXC300GT); 1.7.4 (EXC100GT); 1.7.4 (EXC5000GT); 1.6.3 (EXC1000GT); 1.5.4 (EXC120GT) | — | No fix listed | CNA |
| Sielco | Radio Link | 2.06 (RTX19); 2.05 (RTX19); 2.00 (EXC19); 1.60 (RTX19); 1.59 (RTX19); 1.55 (EXC19) | — | No fix listed | CNA |
- Analog FM transmitter VendorSielco Affected 2.12 (EXC5000GX); 2.12 (EXC120GX); 2.11 (EXC300GX); 2.10 (EXC1600GX); 2.10 (EXC2000GX); 2.08 (EXC1600GX); 2.08 (EXC1000GX); 2.07 (EXC3000GX); 2.06 (EXC5000GX); 1.7.7 (EXC30GT); 1.7.4 (EXC300GT); 1.7.4 (EXC100GT); 1.7.4 (EXC5000GT); 1.6.3 (EXC1000GT); 1.5.4 (EXC120GT) Fixed in — No fix listed CNA
- Radio Link VendorSielco Affected 2.06 (RTX19); 2.05 (RTX19); 2.00 (EXC19); 1.60 (RTX19); 1.59 (RTX19); 1.55 (EXC19) Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gx:2.12:*:*:*:*:*:*:* | 2.12 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc120gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc120gx:2.12:*:*:*:*:*:*:* | 2.12 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc300gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc300gx:2.11:*:*:*:*:*:*:* | 2.11 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc1600gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc1600gx:2.10:*:*:*:*:*:*:* | 2.10 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc2000gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc2000gx:2.10:*:*:*:*:*:*:* | 2.10 | Running on | Sielco |
- cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gx:2.12:*:*:*:*:*:*:* Versions 2.12 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc120gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc120gx:2.12:*:*:*:*:*:*:* Versions 2.12 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc300gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc300gx:2.11:*:*:*:*:*:*:* Versions 2.11 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1600gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc1600gx:2.10:*:*:*:*:*:*:* Versions 2.10 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc2000gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc2000gx:2.10:*:*:*:*:*:*:* Versions 2.10 Running on ·Sielco
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:sielco:analog_fm_transmitter_exc1600gx:2.08:*:*:*:*:*:*:* | 2.08 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc1000gx:2.08:*:*:*:*:*:*:* | 2.08 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc3000gx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc3000gx:2.07:*:*:*:*:*:*:* | 2.07 | Running on | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gx:2.06:*:*:*:*:*:*:* | 2.06 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc30gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc30gt:1.7.7:*:*:*:*:*:*:* | 1.7.7 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc300gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc300gt:1.7.4:*:*:*:*:*:*:* | 1.7.4 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc100gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc100gt:1.7.4:*:*:*:*:*:*:* | 1.7.4 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gt:1.7.4:*:*:*:*:*:*:* | 1.7.4 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc1000gt:1.6.3:*:*:*:*:*:*:* | 1.6.3 | Running on | Sielco |
| cpe:2.3:o:sielco:analog_fm_transmitter_exc120gt_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:analog_fm_transmitter_exc120gt:1.5.4:*:*:*:*:*:*:* | 1.5.4 | Running on | Sielco |
| cpe:2.3:o:sielco:radio_link_rtx19_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:radio_link_rtx19:2.06:*:*:*:*:*:*:* | 2.06 | Running on | Sielco |
| cpe:2.3:h:sielco:radio_link_rtx19:2.05:*:*:*:*:*:*:* | 2.05 | Running on | Sielco |
| cpe:2.3:o:sielco:radio_link_exc19_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Sielco |
| cpe:2.3:h:sielco:radio_link_exc19:2.00:*:*:*:*:*:*:* | 2.00 | Running on | Sielco |
| cpe:2.3:h:sielco:radio_link_rtx19:1.60:*:*:*:*:*:*:* | 1.60 | Running on | Sielco |
| cpe:2.3:h:sielco:radio_link_rtx19:1.59:*:*:*:*:*:*:* | 1.59 | Running on | Sielco |
| cpe:2.3:h:sielco:radio_link_exc19:1.55:*:*:*:*:*:*:* | 1.55 | Running on | Sielco |
- cpe:2.3:h:sielco:analog_fm_transmitter_exc1600gx:2.08:*:*:*:*:*:*:* Versions 2.08 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc1000gx:2.08:*:*:*:*:*:*:* Versions 2.08 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc3000gx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc3000gx:2.07:*:*:*:*:*:*:* Versions 2.07 Running on ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gx:2.06:*:*:*:*:*:*:* Versions 2.06 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc30gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc30gt:1.7.7:*:*:*:*:*:*:* Versions 1.7.7 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc300gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc300gt:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc100gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc100gt:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc5000gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc5000gt:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc1000gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc1000gt:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Running on ·Sielco
- cpe:2.3:o:sielco:analog_fm_transmitter_exc120gt_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:analog_fm_transmitter_exc120gt:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Running on ·Sielco
- cpe:2.3:o:sielco:radio_link_rtx19_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:radio_link_rtx19:2.06:*:*:*:*:*:*:* Versions 2.06 Running on ·Sielco
- cpe:2.3:h:sielco:radio_link_rtx19:2.05:*:*:*:*:*:*:* Versions 2.05 Running on ·Sielco
- cpe:2.3:o:sielco:radio_link_exc19_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Sielco
- cpe:2.3:h:sielco:radio_link_exc19:2.00:*:*:*:*:*:*:* Versions 2.00 Running on ·Sielco
- cpe:2.3:h:sielco:radio_link_rtx19:1.60:*:*:*:*:*:*:* Versions 1.60 Running on ·Sielco
- cpe:2.3:h:sielco:radio_link_rtx19:1.59:*:*:*:*:*:*:* Versions 1.59 Running on ·Sielco
- cpe:2.3:h:sielco:radio_link_exc19:1.55:*:*:*:*:*:*:* Versions 1.55 Running on ·Sielco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-42769
- 2026-10-03 Alias added: GHSA-f78q-jqxf-66cm
References
More Sielco Analog Fm Transmitter Exc1000gt Firmware vulnerabilities
- TI-2023-24287 Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery CVSS 3.1HIGH 8.8
- TI-2023-22349 Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions CVSS 3.1HIGH 8.8
- TI-2023-24233 Sielco Radio Link and Analog FM Transmitters Improper Access Control CVSS 3.1MEDIUM 6.5
Sources
- CVE-2023-42769 · CVE Program
- CVE-2023-42769 · NVD
- FIRST EPSS
- GHSA-f78q-jqxf-66cm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences