Lucene search

MitreCVE-2023-34673

HistoryJun 23, 2023 - 7:15 p.m.

CVE-2023-34673

2023-06-2319:15:09

mitre

web.nvd.nist.gov

elenos etg150

fm transmitter

cve-2023-34673

security vulnerability

smtp credentials

memcached

internet-based attack

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.

Affected configurations

Nvd

Node

elenosetg150_firmwareMatch3.12

AND

elenosetg150Match-

VendorProductVersionCPE
elenosetg150_firmware3.12cpe:2.3:o:elenos:etg150_firmware:3.12:*:*:*:*:*:*:*
elenosetg150-cpe:2.3:h:elenos:etg150:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elenos	etg150_firmware	3.12	cpe:2.3:o:elenos:etg150_firmware:3.12:::::::*
elenos	etg150	-	cpe:2.3:h:elenos:etg150:-:::::::*

References

elenos.com

strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34673

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

39.4%

JSON

Related for CVE-2023-34673