CVE-2023-6930CWE-284

Improper Access Control in EuroTel ETL3100

Critical · published December 19, 2023

CVSS v3.1
9.4
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

🚨 Unauthenticated access to configuration and logs? Yep, that's what's happening in EuroTel ETL3100 versions v01c01 and v01x37 — a ticket to your security disaster! 🔥 Think of it like a hotel with unlocked back doors and no staff to check who's coming in — anyone can stroll in, grab the guest list, and even change room keys at will! This vulnerability could lead to an absolute nightmare! An attacker could bypass authentication, escalate privileges, and gain full control of the system, potentially exposing sensitive data and wreaking havoc on your network. We're talking about a breach that could compromise everything you've worked for!

Put simply

Think of it like a hotel with unlocked back doors and no staff to check who's coming in — anyone can stroll in, grab the guest list, and even change room keys at will! This vulnerability allows unauthenticated users to download sensitive configuration files and logs, enabling them to manipulate system settings and bypass authentication mechanisms altogether.

What to do

This vulnerability could lead to an absolute nightmare! An attacker could bypass authentication, escalate privileges, and gain full control of the system, potentially exposing sensitive data and wreaking havoc on your network. We're talking about a breach that could compromise everything you've worked for! Patch EuroTel ETL3100 to version v01x38 or later immediately. Review your configurations and logs for any suspicious activity, and consider implementing stricter access controls to safeguard sensitive information. Act fast! You've got this! Follow these steps, and you'll be one step closer to locking down your system! 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00821 · 56.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-12-19T23:04Z
EPSS history
Timeline
  • 19 DEC 23:04Z
    Improper Access Control in EuroTel ETL3100
    cvelistv5