Elvaco records

4 published records for vendor elvaco.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2024-49397No exploit	Cross-site Scripting in Elvaco M-Bus Metering Gateway CMe3100elvaco · m-bus metering gateway cme3100 · CWE-79 Pre-auth Auth bypass XSS	Critical9.2	—	0.3%	Oct 17, 2024
35Monitor	CVE-2024-49398No exploit	Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100elvaco · m-bus metering gateway cme3100 · CWE-434 Pre-auth File upload	High8.8	—	0.5%	Oct 17, 2024
34Monitor	CVE-2024-49396No exploit	Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100elvaco · m-bus metering gateway cme3100 · CWE-522 Pre-auth Info leak	High8.7	—	0.3%	Oct 17, 2024
34Monitor	CVE-2024-49399No exploit	Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100elvaco · m-bus metering gateway cme3100 · CWE-306 Pre-auth Auth bypass	High8.7	—	0.3%	Oct 17, 2024

CVE-2024-49397
36Monitor
Cross-site Scripting in Elvaco M-Bus Metering Gateway CMe3100
CriticalCVSS 9.2No exploitEPSS 0%
elvaco · m-bus metering gateway cme3100Oct 17, 2024
CVE-2024-49398
35Monitor
Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- File upload
elvaco · m-bus metering gateway cme3100Oct 17, 2024
CVE-2024-49396
34Monitor
Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
elvaco · m-bus metering gateway cme3100Oct 17, 2024
CVE-2024-49399
34Monitor
Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
elvaco · m-bus metering gateway cme3100Oct 17, 2024