Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-22179

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Electrolink Compact DAB Transmitter

Default version status: unaffected

  • 10Waffected
  • 100Waffected
  • 250Waffected

Electrolink Medium DAB Transmitter

Default version status: unaffected

  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink High Power DAB Transmitter

Default version status: unaffected

  • 2.5kWaffected
  • 3kWaffected
  • 4kWaffected
  • 5kWaffected

Electrolink Compact FM Transmitter

Default version status: unaffected

  • Compact FM Transmitteraffected
  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink Modular FM Transmitter

Default version status: unaffected

  • 3kWaffected
  • 5kWaffected
  • 10kWaffected
  • 15kWaffected
  • 20kWaffected
  • 30kWaffected

Electrolink Digital FM Transmitter

Default version status: unaffected

  • 15W to ≤ 40kWaffected

Electrolink VHF TV Transmitter

Default version status: unaffected

  • BIaffected
  • BIIIaffected

Electrolink UHF TV Transmitter

Default version status: unaffected

  • 10W to ≤ 5kWaffected

References