CVE-2023-37832

CVE-2023-37832 describes a lack of rate limiting in the Elenos ETG150 FM transmitter, version v3.12, that enables brute-forcing of user credentials and may lead to other unspecified impacts. The available connected documents confirm the affected product and the underlying issue but do not provide...

CVE-2023-37833

CVE-2023-37833 affects the Elenos ETG150 FM transmitter, version v3.12. The issue is improper access control that lets attackers perform arbitrary configuration edits that should be restricted to privileged users. The available documents specify the vulnerable component and the basic impact (unau...

CVE-2023-37831

The CVE-2023-37831 issue affects Elenos ETG150 FM transmitter v3.12. Reports in multiple sources describe an information-disclosure style vulnerability where login responses enable an attacker to enumerate user accounts based on server behavior when credentials are submitted. CVSS v3.1 base metri...

Elenos ETG150 Security Vulnerability

The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM Transmitter version v3.12, which stems from the presence of improper access control and allows an attacker to make arbitrary configuration edits...

PT-2023-27074 · Elenos · Elenos Etg150 Fm Transmitter

Name of the Vulnerable Software and Affected Versions: Elenos ETG150 FM Transmitter version 3.12 Description: The issue is related to insufficient session expiration, allowing attackers to change transmitter configuration and data after a user has logged out. Recommendations: For Elenos ETG150 FM...

CVE-2023-37832

A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

Design/Logic Flaw

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-45396

CVE-2023-45396 is an IDOR vulnerability affecting Elenos ETG150 FM transmitter version 3.12. The issue enables access to sensitive assets (events profiles) due to insecure direct object references in the application. Connected sources (Red Hat advisory, NVD, PT Security, CNNVD, and others) consis...

Elenos ETG150 Security Vulnerability

The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12, which originates from an insecure direct object reference IDOR that occurs when an application provides direct access to an object based on user-supplied input...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

PT-2023-29547 · Elenos · Elenos Etg150 Fm Transmitter

Name of the Vulnerable Software and Affected Versions: Elenos ETG150 FM transmitter version 3.12 Description: An Insecure Direct Object Reference IDOR issue allows access to events profiles. Recommendations: For Elenos ETG150 FM transmitter version 3.12, consider restricting access to sensitive...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter, which allows a intruder to enhance their privileges

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter is related to insufficient protection of operational data. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the Memcached service of the microprogramming software used in the Elenos ETG150 transmitter allows a hacker to increase their privileges.

The vulnerability of the Memcached microprogramming system used by the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2023-34673

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...

CVE-2023-34673

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...