CVE-2023-37831

2023-10-3100:00:00

mitre

github.com

elenos etg150

fm transmitter

user accounts enumeration

server responses

credentials submission

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

21.7%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:elenos:etg150_fm:-:*:*:*:*:*:*:*"
    ],
    "vendor": "elenos",
    "product": "etg150_fm",
    "versions": [
      {
        "status": "affected",
        "version": "3.12"
      }
    ],
    "defaultStatus": "unknown"
  }
]