GCVE - cpe:2.3:h:elenos:etg150_fm:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:elenos:etg150_fm:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Elenos (`ca703c73-9165-5ab5-a935-3ff184ef4b6a`)
Product	Etg150 Fm (`1ea9a10c-c181-5c25-9111-5367a957a796`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-45396`	vulnerable	2026-06-08 06:12:42.601920	Details available An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12. Published: 2023-10-11T00:00:00.000Z Updated: 2024-09-18T16:05:11.084Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/%28IDOR%29%20leads%20to%20events%20profiles%20access%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39695`	vulnerable	2026-06-08 06:09:37.945225	Details available Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:01:39.275Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/35fe4fb3d5945b5df2a87aab0cf9ec6137bcf976/Insufficient%20Session%20Expiration%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37833`	vulnerable	2026-06-08 06:08:15.995798	Details available Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:27:24.748Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/BAC%20leads%20to%20access%20Traps%20configurations.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37832`	vulnerable	2026-06-08 06:08:15.995198	Details available A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-17T13:18:18.899Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/Lack%20of%20resources%20and%20rate%20limiting%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37831`	vulnerable	2026-06-08 06:08:15.993074	Details available An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted. Published: 2023-10-31T00:00:00.000Z Updated: 2024-09-12T14:11:21.156Z Open on db.gcve.eu Reference links https://github.com/strik3r0x1/Vulns/blob/main/User%20enumeration%20-%20Elenos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34671`	not_vulnerable	2026-06-08 06:06:25.878886	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.