汇总 elenos 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 输入验证问题，在 生产负载与软件部署 使用场景中可能带来 异常行为 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2023-39695 | Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out. | [email protected] | 5.3 | 0.40% | 2023-10-31 | 2026-06-17 |
| CVE-2023-37833 | Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users. | [email protected] | 2.7 | 0.41% | 2023-10-31 | 2026-06-17 |
| CVE-2023-37832 | A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts. | [email protected] | 7.5 | 0.55% | 2023-10-31 | 2026-06-17 |
| CVE-2023-37831 | An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted. | [email protected] | 5.3 | 0.46% | 2023-10-31 | 2026-06-17 |
| CVE-2023-45396 | An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12. | [email protected] | 6.5 | 0.38% | 2023-10-11 | 2026-06-17 |
| CVE-2023-34673 | Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases. | [email protected] | 6.5 | 0.70% | 2023-06-23 | 2026-06-17 |
| CVE-2023-34672 | Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases. | [email protected] | 8.8 | 0.77% | 2023-06-23 | 2026-06-17 |
| CVE-2023-34671 | Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases. | [email protected] | 8.8 | 0.90% | 2023-06-23 | 2026-06-17 |