GCVE - cpe:2.3:o:elenos:etg150_firmware:3.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:elenos:etg150_firmware:3.12:*:*:*:*:*:*:*

part: o version: 3.12 update: *

Vendor	Elenos (`ca703c73-9165-5ab5-a935-3ff184ef4b6a`)
Product	Etg150 Firmware (`6fcac250-3ea3-5ca1-8396-7059838dd8b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-45396`	vulnerable	2026-06-08 06:12:42.603099	Details available An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12. Published: 2023-10-11T00:00:00.000Z Updated: 2024-09-18T16:05:11.084Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/%28IDOR%29%20leads%20to%20events%20profiles%20access%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39695`	vulnerable	2026-06-08 06:09:37.946384	Details available Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:01:39.275Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/35fe4fb3d5945b5df2a87aab0cf9ec6137bcf976/Insufficient%20Session%20Expiration%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37833`	vulnerable	2026-06-08 06:08:15.995970	Details available Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:27:24.748Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/BAC%20leads%20to%20access%20Traps%20configurations.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37832`	vulnerable	2026-06-08 06:08:15.995454	Details available A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-17T13:18:18.899Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/Lack%20of%20resources%20and%20rate%20limiting%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37831`	vulnerable	2026-06-08 06:08:15.994006	Details available An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:11:21.156Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/User%20enumeration%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34673`	vulnerable	2026-06-08 06:06:25.882809	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34672`	vulnerable	2026-06-08 06:06:25.882349	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.