Advisories · Technology

Elvaco M-Bus Metering Gateway CMe3100.

Every CVE that names Elvaco M-Bus Metering Gateway CMe3100 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-49399 CVE record

CVSS 8.7 High

Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100
- Elvaco M-Bus Metering Gateway CMe3100
- Authentication bypass
Not analysed yet 17 Oct 2024
CVE-2024-49398 CVE record

CVSS 8.8 High

Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100
- Elvaco M-Bus Metering Gateway CMe3100
- Unrestricted file upload
Not analysed yet 17 Oct 2024
CVE-2024-49397 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Cross-site Scripting in Elvaco M-Bus Metering Gateway CMe3100
- Elvaco M-Bus Metering Gateway CMe3100
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2024
CVE-2024-49396 CVE record

CVSS 8.7 High

Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100
- Elvaco M-Bus Metering Gateway CMe3100
- Hard-coded credentials
Not analysed yet 17 Oct 2024