CVE-2023-34673
Last modified
CVE-2023-34673 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Elenos | Etg150 Firmware | 3.12 |
References
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34673Exploit, Third Party Advisory
- https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34673Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-34673?
How severe is CVE-2023-34673?
How do I fix CVE-2023-34673?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-34660jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload…6.5
- CVE-2023-34666Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber…6.1
- CVE-2023-34669TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vul…7.5
- CVE-2023-3467Privilege Escalation to root administrator (nsroot) 8
- CVE-2023-34671Improper Access Control leads to privilege escalation affect…8.8
- CVE-2023-34672Improper Access Control leads to adding a high-privilege use…8.8
- CVE-2023-34682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2023-3469Cross-site Scripting (XSS) - Reflected in GitHub repository …4.8
- CVE-2023-3470 Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM ca…6.1
- CVE-2023-3471Buffer overflow vulnerability in Panasonic KW Watcher versio…7.8
- CVE-2023-3472Use after free vulnerability in Panasonic KW Watcher version…7.8
- CVE-2023-34723An issue was discovered in TechView LA-5570 Wireless Gateway…7.5
Are you affected by CVE-2023-34673?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST