CVE-2023-34671

CVE-2023-34671 affects Elenos ETG150 FM transmitter (version 3.12). Root cause: improper access control that lets a user’s role in their profile escalate privileges. Impact: potential privilege escalation; attack could occur over the public Internet in some cases. Connected sources also indicate ...

CVE-2023-34672

Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...

CVE-2023-34672

CVE-2023-34672 affects the Elenos ETG150 FM transmitter (version 3.12). The root cause is improper access control in the admin/profile permissions, enabling an attacker to add a high-privilege user via the user’s role. The impact is privilege escalation with impact on confidentiality, integrity, ...

CVE-2023-34673

Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...