Approved changes feed: RSS · Atom

cpe:2.3:a:elvaco:m-bus_metering_gateway_cme3100:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElvaco (ba9e02eb-d746-543a-b093-2c0e0a4393be)
ProductM Bus Metering Gateway Cme3100 (bad482df-eaa3-5841-9b65-d6f0d2dca195)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49399 vulnerable 2026-06-08 06:50:13.801264 Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100
The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.
Published: 2024-10-17T16:19:47.991Z
Updated: 2024-10-17T16:56:24.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49398 vulnerable 2026-06-08 06:50:13.800888 Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100
The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.
Published: 2024-10-17T16:17:31.423Z
Updated: 2024-10-17T17:51:38.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49397 vulnerable 2026-06-08 06:50:13.800417 Cross-site Scripting in Elvaco M-Bus Metering Gateway CMe3100
The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.
Published: 2024-10-17T16:15:14.508Z
Updated: 2024-10-17T17:51:47.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49396 vulnerable 2026-06-08 06:50:13.799748 Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100
The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information.
Published: 2024-10-17T16:12:21.215Z
Updated: 2024-10-17T17:51:54.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.