CVE-2023-6928

CRITICAL

EuroTel ETL3100 v01c01 and v01x37 - Unauthenticated Excessive Authentication Attempts

Title source: llm

Description

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource government-resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05

Scores

CVSS v3 9.8

EPSS 0.0077

EPSS Percentile 50.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-307

Status published

Products (2)

eurotel/etl3100_firmware 01c01

eurotel/etl3100_firmware 01x37

Published Dec 19, 2023

Tracked Since Feb 18, 2026