cme3100_firmware vulnerabilities

2 known vulnerabilities in cme3100_firmware from Elvaco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  M-Bus Metering Gateway CMe3100: Missing Authentication for Critical Functionality

  CVE-2024-49399Oct 17, 2024Elvaco

  The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.

• 8.7 High severity

  M-Bus Metering Gateway CMe3100: Insufficiently Protected Credentials

  CVE-2024-49396Oct 17, 2024Elvaco

  The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information.