CVE-2023-34673
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
The Elenos ETG150 FM transmitter running version 3.12 was found leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.
Risk Assessment
The organization is at risk of having SMTP login credentials stolen, which could lead to unauthorized email sending and further compromise of email systems.
Recommendation
Immediately update the transmitter firmware to the latest version and configure the Memcached service to be accessible only from trusted IP addresses.
Original NVD description (English source)
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.