PT-2023-26137 · Elenos · Elenos Etg150 Fm Transmitter

Strik3R · Publicado 2023-10-31 · Atualizado 2023-11-08 · CVE-2023-37833

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elenos ETG150 FM transmitter version 3.12

Description The issue is related to improper access control, allowing attackers to make arbitrary configuration edits that are normally only accessible by privileged users.

Recommendations For Elenos ETG150 FM transmitter version 3.12, consider restricting access to configuration edit features until a patch is available. As a temporary workaround, limit the privileges of non-administrative users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2023-37833

Produtos afetados

Elenos Etg150 Fm Transmitter

Referências · 7

• 🔥 https://github.com/strik3r0x1/Vulns/blob/main/BAC%20leads%20to%20access%20Traps%20configurations.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-37833 · Nota de Segurança
• https://t.me/cibsecurity/73279 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-37833 · Aviso do Fabricante
• https://t.me/cvenotify/60263 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1719484428647272509 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1719510585719550080 · Publicação no Twitter