Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-3741

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Electrolink Compact DAB Transmitter

Default version status: unaffected

  • 10Waffected
  • 100Waffected
  • 250Waffected

Electrolink Medium DAB Transmitter

Default version status: unaffected

  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink High Power DAB Transmitter

Default version status: unaffected

  • 2.5kWaffected
  • 3kWaffected
  • 4kWaffected
  • 5kWaffected

Electrolink Compact FM Transmitter

Default version status: unaffected

  • Compact FM Transmitteraffected
  • 500Waffected
  • 1kWaffected
  • 2kWaffected

Electrolink Modular FM Transmitter

Default version status: unaffected

  • 3kWaffected
  • 5kWaffected
  • 10kWaffected
  • 15kWaffected
  • 20kWaffected
  • 30kWaffected

Electrolink Digital FM Transmitter

Default version status: unaffected

  • 15W to ≤ 40kWaffected

Electrolink VHF TV Transmitter

Default version status: unaffected

  • BIaffected
  • BIIIaffected

Electrolink UHF TV Transmitter

Default version status: unaffected

  • 10W to ≤ 5kWaffected

References