← CVE Intelligence

CVE-2024-22186

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking PUBLISHED

Description (CNA)

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.

Affected (CNA)

Vendor / productVersions
Electrolink / Compact DAB Transmitteraffected 10W; affected 100W; affected 250W
Electrolink / Medium DAB Transmitteraffected 500W; affected 1kW; affected 2kW
Electrolink / High Power DAB Transmitteraffected 2.5kW; affected 3kW; affected 4kW; affected 5kW
Electrolink / Compact FM Transmitteraffected Compact FM Transmitter; affected 500W; affected 1kW; affected 2kW
Electrolink / Modular FM Transmitteraffected 3kW; affected 5kW; affected 10kW; affected 15kW; affected 20kW; affected 30kW
Electrolink / Digital FM Transmitteraffected 15W through 40kW
Electrolink / VHF TV Transmitteraffected BI; affected BIII
Electrolink / UHF TV Transmitteraffected 10W through 5kW

CWE

CWE-565

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.