CVE-2023-36082

Technical details on CVE-2023-36082 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases; current sources reiterate a privilege-escalation via LDAP/SMTP credentials in GatesAir Flexiva.

GatesAIr Flexiva FM Transmitter Security Vulnerability

GatesAIr Flexiva FM Transmitter is an FM platform from GatesAIr, Inc. A security vulnerability exists in the GatesAIR Flexiva FM Transmitter/Exciter Fax 150W that could allow a remote attacker to gain privileges via LDAP and SMTP credentials...

CVE-2023-36082

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials...

CVE-2023-36081

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard...

Cross site scripting

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard...

CVE-2023-36081

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard...

GatesAIr Flexiva FM Transmitter Cross-Site Scripting Vulnerability

The GatesAIr Flexiva FM Transmitter is an FM platform from GatesAIr, Inc. A security vulnerability exists in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W. An attacker can exploit the vulnerability to execute arbitrary code on a web application dashboard via a specially crafted script...

CVE-2023-36081

The CVE-2023-36081 entry concerns GatesAir Flexiva FM Transmitter/Exciter v.FAX 150W. The connected sources describe a Cross Site Scripting (XSS) vulnerability in the web dashboard, enabling a remote attacker to execute arbitrary code via a crafted script. Affected component is the web applicatio...

CVE-2023-36081

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard...

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter, which allows a intruder to enhance their privileges

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter is related to insufficient protection of operational data. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the Memcached service of the microprogramming software used in the Elenos ETG150 transmitter allows a hacker to increase their privileges.

The vulnerability of the Memcached microprogramming system used by the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2023-34673

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...

CVE-2023-34673

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...

CVE-2023-34672

Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...

Improper access control

Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...

Code injection

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...

CVE-2023-34671

Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases...

CVE-2023-34671

Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases...

Improper access control

Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases...