CVEvulnerability
CVE-2023-34672
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-23
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-281
Description
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases.
Affected configurations
• elenos etg150 firmware 3.12
Related
Weakness · CWE (1)
- CWE-281 Improper Preservation of Permissions weakness
References
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34672 Exploit, Third Party Advisory
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34672 Exploit, Third Party Advisory