← CVE Intelligence

CVE-2024-3741

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data PUBLISHED

Description (CNA)

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

Affected (CNA)

Vendor / productVersions
Electrolink / Compact DAB Transmitteraffected 10W; affected 100W; affected 250W
Electrolink / Medium DAB Transmitteraffected 500W; affected 1kW; affected 2kW
Electrolink / High Power DAB Transmitteraffected 2.5kW; affected 3kW; affected 4kW; affected 5kW
Electrolink / Compact FM Transmitteraffected Compact FM Transmitter; affected 500W; affected 1kW; affected 2kW
Electrolink / Modular FM Transmitteraffected 3kW; affected 5kW; affected 10kW; affected 15kW; affected 20kW; affected 30kW
Electrolink / Digital FM Transmitteraffected 15W through 40kW
Electrolink / VHF TV Transmitteraffected BI; affected BIII
Electrolink / UHF TV Transmitteraffected 10W through 5kW

CWE

CWE-302

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.