CVE-2023-34671

HighCVSS 8.8

Published: 23/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

Improper access control in Elenos ETG150 FM transmitter version 3.12 allows privilege escalation by exploiting user roles in the user profile. The attack can be carried out over the public internet in some cases.

Risk Assessment

The organization faces the risk of unauthorized access to administrative functions of the transmitter, potentially leading to device takeover and disruption of broadcasts.

Recommendation

Immediately update the Elenos ETG150 transmitter firmware to the latest version and restrict management interface access to trusted networks only.

Other vulnerabilities in Elenos ETG150

CVE-2023-34673Medium
The Elenos ETG150 FM transmitter running version 3.12 was found leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.

Original NVD description (English source)

Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS