VULNERABILITY INTELLIGENCE
CVE-2023-34672
CVSS score8.8 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2023-06-23
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-281
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory