Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-21872

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Electrolink Compact DAB Transmitter

Default version status: unaffected

  • 10Waffected
  • 100Waffected
  • 250Waffected

Electrolink Medium DAB Transmitter

Default version status: unaffected

  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink High Power DAB Transmitter

Default version status: unaffected

  • 2.5kWaffected
  • 3kWaffected
  • 4kWaffected
  • 5kWaffected

Electrolink Compact FM Transmitter

Default version status: unaffected

  • Compact FM Transmitteraffected
  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink Modular FM Transmitter

Default version status: unaffected

  • 3kWaffected
  • 5kWaffected
  • 10kWaffected
  • 15kWaffected
  • 20kWaffected
  • 30kWaffected

Electrolink Digital FM Transmitter

Default version status: unaffected

  • 15W to ≤ 40kWaffected

Electrolink VHF TV Transmitter

Default version status: unaffected

  • BIaffected
  • BIIIaffected

Electrolink UHF TV Transmitter

Default version status: unaffected

  • 10W to ≤ 5kWaffected

References