The vulnerability of Microprogrammed Software in EuroTel ETL3100 and EuroTel ETL3100RT transmission devices lies in the improper limitation on the number of unsuccessful authentication attempts, allowing a perpetrator to gain full access.

🗓️ 11 Jan 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Improper limit on failed authentication enables full access on EuroTel ETL3100 and ETL3100RT.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-6930	20 Dec 202313:53	–	circl
CNNVD	EuroTel ETL3100 Security Vulnerability	19 Dec 202300:00	–	cnnvd
CVE	CVE-2023-6930	19 Dec 202323:04	–	cve
Cvelist	CVE-2023-6930 Improper Access Control in EuroTel ETL3100	19 Dec 202323:04	–	cvelist
EUVD	EUVD-2023-59128	3 Oct 202520:07	–	euvd
ICS	EuroTel ETL3100 Radio Transmitter	19 Dec 202307:00	–	ics
NVD	CVE-2023-6930	19 Dec 202323:15	–	nvd
Prion	Authentication flaw	19 Dec 202323:15	–	prion
Positive Technologies	PT-2023-8177 · Eurotel · Eurotel Etl3100	19 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6930	23 May 202504:58	–	redhatcve

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023122017
vuldb	www.vuldb.com/it/
web	www.web.nvd.nist.gov/view/vuln/detail

11 Jan 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 39.8

CVSS 210

EPSS0.00821

EuroTel device ETL3100 model ETL3100RT model authentication attempts brute force full access