CVE-2023-6928

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...

CVE-2023-6929

EuroTel ETL3100, affected versions v01c01 and v01x37, suffer from insecure direct object references (IDOR) that allow bypassing authorization by using user-supplied input to access objects. The root cause is improper access control via direct object access, enabling attackers to reach hidden reso...

CVE-2023-6928

Summary (supported by provided documents): CVE-2023-6928 affects EuroTel ETL3100 transmitter versions v01c01 and v01x37. The vulnerability is an improper restriction of excessive authentication attempts (CWE-307), enabling a remote attacker to perform brute-force-like password guessing for admini...

EuroTel ETL3100 Security Vulnerability

The EuroTel ETL3100 is a radio transmitter from EuroTel. A security vulnerability exists in the EuroTel ETL3100 v01c01 version and v01x37 version that stems from not limiting too many authentication attempts, which allows an attacker to bypass authorization via a user-controlled key...

PT-2023-8177 · Eurotel · Eurotel Etl3100

Name of the Vulnerable Software and Affected Versions: EuroTel ETL3100 versions v01c01 and v01x37 Description: The issue is related to an unauthenticated configuration and log download vulnerability. This vulnerability enables an attacker to disclose sensitive information, which can assist in...

EuroTel ETL3100 Security Vulnerability

The EuroTel ETL3100 is a radio transmitter from EuroTel. A security vulnerability exists in the EuroTel ETL3100 version v01c01 and v01x37, which stems from the presence of an Access Control Error vulnerability. An attacker could exploit the vulnerability to disclose sensitive information and bypa...

PT-2023-8053 · Eurotel · Eurotel Etl3100

Name of the Vulnerable Software and Affected Versions: EuroTel ETL3100 versions v01c01 and v01x37 Description: The issue is related to the lack of limitations on authentication attempts, which can be exploited by a remote attacker to gain full access to the system through brute-force guessing of...