PT-2023-29547 · Elenos · Elenos Etg150 Fm Transmitter

Strik3R · Published 2023-10-11 · Updated 2023-10-18 · CVE-2023-45396

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elenos ETG150 FM transmitter version 3.12

Description An Insecure Direct Object Reference (IDOR) issue allows access to events profiles.

Recommendations For Elenos ETG150 FM transmitter version 3.12, consider restricting access to sensitive events profiles until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2023-45396

Affected Products

Elenos Etg150 Fm Transmitter

References · 5

• 🔥 https://github.com/strik3r0x1/Vulns/blob/main/(IDOR)%20leads%20to%20events%20profiles%20access%20-%20Elenos.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-45396 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45396 · Vendor Advisory
• https://github.com/strik3r0x1/Vulns/blob/main/%28IDOR%29%20leads%20to%20events%20profiles%20access%20-%20Elenos.md · Note
• https://t.me/cibsecurity/72107 · Telegram Post