CVE-2023-34671
Last modified
CVE-2023-34671 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Elenos | Etg150 Fm Firmware | 3.12 |
References
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34671Exploit, Third Party Advisory
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34671Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-34671?
How severe is CVE-2023-34671?
How do I fix CVE-2023-34671?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-34659jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerabilit…9.8
- CVE-2023-3466Reflected Cross-Site Scripting (XSS) 6.1
- CVE-2023-34660jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload…6.5
- CVE-2023-34666Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber…6.1
- CVE-2023-34669TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vul…7.5
- CVE-2023-3467Privilege Escalation to root administrator (nsroot) 8
- CVE-2023-34672Improper Access Control leads to adding a high-privilege use…8.8
- CVE-2023-34673Elenos ETG150 FM transmitter running on version 3.12 was dis…6.5
- CVE-2023-34682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2023-3469Cross-site Scripting (XSS) - Reflected in GitHub repository …4.8
- CVE-2023-3470 Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM ca…6.1
- CVE-2023-3471Buffer overflow vulnerability in Panasonic KW Watcher versio…7.8
Are you affected by CVE-2023-34671?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST