Description
EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers can bypass authorization, access the hidden resources on the system, and execute privileged functionalities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EuroTel | ETL3100 | v01c01, v01x37 | — |
Advisories 1
- ICSA-23-353-05 EuroTel ETL3100 Radio Transmitter CISA ICS & IT advisories · Dec 19, 2023
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05 government-resource