← CVE Intelligence

CVE-2024-21846

Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function PUBLISHED

Description (CNA)

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

Affected (CNA)

Vendor / productVersions
Electrolink / Compact DAB Transmitteraffected 10W; affected 100W; affected 250W
Electrolink / Medium DAB Transmitteraffected 500W; affected 1kW; affected 2kW
Electrolink / High Power DAB Transmitteraffected 2.5kW; affected 3kW; affected 4kW; affected 5kW
Electrolink / Compact FM Transmitteraffected Compact FM Transmitter; affected 500W; affected 1kW; affected 2kW
Electrolink / Modular FM Transmitteraffected 3kW; affected 5kW; affected 10kW; affected 15kW; affected 20kW; affected 30kW
Electrolink / Digital FM Transmitteraffected 15W through 40kW
Electrolink / VHF TV Transmitteraffected BI; affected BIII
Electrolink / UHF TV Transmitteraffected 10W through 5kW

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.