456 matches found
CVE-2023-37832
CVE-2023-37832 describes a lack of rate limiting in the Elenos ETG150 FM transmitter, version v3.12, that enables brute-forcing of user credentials and may lead to other unspecified impacts. The available connected documents confirm the affected product and the underlying issue but do not provide...
CVE-2023-37831
The CVE-2023-37831 issue affects Elenos ETG150 FM transmitter v3.12. Reports in multiple sources describe an information-disclosure style vulnerability where login responses enable an attacker to enumerate user accounts based on server behavior when credentials are submitted. CVSS v3.1 base metri...
CVE-2023-37831
An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted...
CVE-2023-37832
A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts...
CVE-2023-37833
Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users...
CVE-2023-42769 Sielco Radio Link and Analog FM Transmitters Improper Access Control
The cookie session ID is of insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session, bypass authentication, and manipulate the transmitter...
Sielco PolyEco FM Transmitter
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Sielco Equipment : PolyEco1000 Vulnerabilities : Session Fixation, Improper Restriction of Excessive Authentication Attempts, Improper Access Control 2. RISK...
Sielco Analog FM Transmitters Security Vulnerability
Sielco Analog FM Transmitters is an analog FM transmitter from Sielco. A security vulnerability exists in Sielco Analog FM Transmitters that stems from an insufficient cookie session ID length that can be brute-force broken, allowing a remote attacker to obtain a valid session and bypass...
PT-2023-28579 · Softwarex · Softwarex
Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to the cookie session ID being of insufficient length, making it vulnerable to brute force attacks. This could allow a remote attacker to obtain a valid session, bypa...
PT-2023-29494 · Sielco · Analog Fm Transmitter +12
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain...
PT-2023-29464 · Sielco · Analog Fm Transmitter +12
Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The application has an issue with improper access control when editing users. A user with read permissions can manipulate users, passwords, and permissions by sending a single HTTP POST...
TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery
CSRF Change Forward Power: -------------------------...
TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution
Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...
TEM Opera Plus FM Family Transmitter 35.45 XSRF
Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 Denial Of Service Vulnerability
VIMESA VHF/FM Transmitter Blue Plus version 9.7.1 suffers from a denial of service vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint doreboot and restart the transmitter operations. VIMESA VHF/FM Transmitter Blue Plus 9.7.1 doreboot...
CVE-2023-45396
An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...
CVE-2023-45396
An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...
CVE-2023-45396
An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...
