Elenos vulnerabilities
We track 2 vulnerabilities in Elenos products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2023.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Elenos vulnerabilities
- 7.5 High severity
etg150_fm: Improper Restriction of Excessive Authentication Attempts
A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts.
- 8.8 High severity
etg150: Improper Preservation of Permissions
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases.