CVE-2023-34672

CVE-2023-34672 affects the Elenos ETG150 FM transmitter (version 3.12). The root cause is improper access control in the admin/profile permissions, enabling an attacker to add a high-privilege user via the user’s role. The impact is privilege escalation with impact on confidentiality, integrity, ...

Elenos ETG150 安全漏洞

The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12, which can be exploited by an attacker to disclose SMTP credentials and other sensitive information through an accessible Memcached service...

Elenos ETG150 安全漏洞

The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12 that stems from the presence of incorrect access control, which can be exploited by an attacker to escalate user role privileges using a user profile...

CVE-2023-34671

CVE-2023-34671 affects Elenos ETG150 FM transmitter (version 3.12). Root cause: improper access control that lets a user’s role in their profile escalate privileges. Impact: potential privilege escalation; attack could occur over the public Internet in some cases. Connected sources also indicate ...