← CVE Intelligence

CVE-2024-21872

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking PUBLISHED

Description (CNA)

The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.

Affected (CNA)

Vendor / productVersions
Electrolink / Compact DAB Transmitteraffected 10W; affected 100W; affected 250W
Electrolink / Medium DAB Transmitteraffected 500W; affected 1kW; affected 2kW
Electrolink / High Power DAB Transmitteraffected 2.5kW; affected 3kW; affected 4kW; affected 5kW
Electrolink / Compact FM Transmitteraffected Compact FM Transmitter; affected 500W; affected 1kW; affected 2kW
Electrolink / Modular FM Transmitteraffected 3kW; affected 5kW; affected 10kW; affected 15kW; affected 20kW; affected 30kW
Electrolink / Digital FM Transmitteraffected 15W through 40kW
Electrolink / VHF TV Transmitteraffected BI; affected BIII
Electrolink / UHF TV Transmitteraffected 10W through 5kW

CWE

CWE-565

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.