What’s Vulnerable › Vulnerabilities

CVE-2023-6930: Improper Access Control in EuroTel ETL3100

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-19 · updated 2026-06-17
• Weakness: CWE-284

Description

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access.

Affected products

• EuroTel ETL3100: 01c01, 01x37

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05

Get alerted when CVE-2023-6930 or the next vulnerability affects your stack