Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-21846

Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Electrolink Compact DAB Transmitter

Default version status: unaffected

  • 10Waffected
  • 100Waffected
  • 250Waffected

Electrolink Medium DAB Transmitter

Default version status: unaffected

  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink High Power DAB Transmitter

Default version status: unaffected

  • 2.5kWaffected
  • 3kWaffected
  • 4kWaffected
  • 5kWaffected

Electrolink Compact FM Transmitter

Default version status: unaffected

  • Compact FM Transmitteraffected
  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink Modular FM Transmitter

Default version status: unaffected

  • 3kWaffected
  • 5kWaffected
  • 10kWaffected
  • 15kWaffected
  • 20kWaffected
  • 30kWaffected

Electrolink Digital FM Transmitter

Default version status: unaffected

  • 15W to ≤ 40kWaffected

Electrolink VHF TV Transmitter

Default version status: unaffected

  • BIaffected
  • BIIIaffected

Electrolink UHF TV Transmitter

Default version status: unaffected

  • 10W to ≤ 5kWaffected

References