CVE-2023-37831

Description

Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted.

Discoverer: Eslam Kamal (Strik3r)

Vendor of Product: Elenos

Affected Product: Elenos ETG150 FM transmitter - 3.12

Details

Find full details here:

POC