Analog Fm Transmitter Exc120gt Firmware vulnerabilities
3 known vulnerabilities in Analog Fm Transmitter Exc120gt Firmware from Sielco. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Analog FM transmitter: Cross-Site Request Forgery
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a mali
- 9.8 Critical severity
Analog FM transmitter: Improper Restriction of Excessive Authentication Attempts
The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter.
- 8.8 High severity
Analog FM transmitter: Improper Privilege Management
The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.