Read the docs

EuroTel

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

EuroTel records in CISA KEV

No EuroTel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Etl3100 Firmware 3 records MEDIUM

Records

3 records

TI-2023-06333 CVE-2023-6930 · GHSA-c784-m29q-c427

Improper Access Control in EuroTel ETL3100

Priority MEDIUM 50

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00821 Published 2023-12-19 No fix listed CWE-284
TI-2023-06332 CVE-2023-6929 · GHSA-c3jv-hpf4-4rpw

Authorization Bypass Through User-Controlled Key in EuroTel ETL3100

Priority MEDIUM 50

EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00805 Published 2023-12-19 No fix listed CWE-639
TI-2023-06331 CVE-2023-6928 · GHSA-cgpg-x4hh-6j98

Improper Restriction of Excessive Authentication Attempts

Priority MEDIUM 43

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2023-12-19 No fix listed CWE-307
Open these records in search →