← CVE Intelligence

CVE-2024-22179

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data PUBLISHED

Description (CNA)

The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.

Affected (CNA)

Vendor / productVersions
Electrolink / Compact DAB Transmitteraffected 10W; affected 100W; affected 250W
Electrolink / Medium DAB Transmitteraffected 500W; affected 1kW; affected 2kW
Electrolink / High Power DAB Transmitteraffected 2.5kW; affected 3kW; affected 4kW; affected 5kW
Electrolink / Compact FM Transmitteraffected Compact FM Transmitter; affected 500W; affected 1kW; affected 2kW
Electrolink / Modular FM Transmitteraffected 3kW; affected 5kW; affected 10kW; affected 15kW; affected 20kW; affected 30kW
Electrolink / Digital FM Transmitteraffected 15W through 40kW
Electrolink / VHF TV Transmitteraffected BI; affected BIII
Electrolink / UHF TV Transmitteraffected 10W through 5kW

CWE

CWE-302

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.