High ICSA-24-107-02 7 CVEs

Electrolink FM/DAB/TV Transmitter

Published Apr 16, 2024 · Updated Apr 16, 2024

Vendor: Electrolink Product: 100W Compact DAB Transmitter Product: 100W Compact FM Transmitter Product: 10kW Modular FM Transmitter Product: 10W - 5kW UHF TV Transmitter Product: 10W Compact DAB Transmitter Product: 15kW Modular FM Transmitter Product: 15W - 40kW Digital FM Transmitter Product: 1kW Compact FM Transmitter Product: 1kW Medium DAB Transmitter Product: 2.5kW High Power DAB Transmitter Product: 20kW Modular FM Transmitter Product: 250W Compact DAB Transmitter Product: 2kW Compact FM Transmitter Product: 2kW Medium DAB Transmitter Product: 30kW Modular FM Transmitter Product: 3kW High Power DAB Transmitter Product: 3kW Modular FM Transmitter Product: 4kW High Power DAB Transmitter Product: 500W Compact FM Transmitter Product: 500W Medium DAB Transmitter Product: 5kW High Power DAB Transmitter Product: 5kW Modular FM Transmitter Product: BI VHF TV Transmitter Product: BIII VHF TV Transmitter

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain full system access, keep the device from transmitting, escalate privileges, change credentials, and execute arbitrary code.

Vulnerabilities 7

High 8.8

CVE-2024-22186

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.

Electrolink Modular FM Transmitter VHF TV Transmitter Medium DAB Transmitter

Apr 18, 2024
High 7.5

CVE-2024-1491

Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function

The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flas…

Electrolink UHF TV Transmitter Compact DAB Transmitter High Power DAB Transmitter

Apr 18, 2024
High 7.5

CVE-2024-21872

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.

Electrolink Modular FM Transmitter VHF TV Transmitter Medium DAB Transmitter

Apr 18, 2024
High 7.5

CVE-2024-22179

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.

Electrolink VHF TV Transmitter Medium DAB Transmitter Compact FM Transmitter

Apr 18, 2024
High 7.5

CVE-2024-3741

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

Electrolink High Power DAB Transmitter Modular FM Transmitter VHF TV Transmitter

Apr 18, 2024
High 7.5

CVE-2024-3742 Scanner template

Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.

Electrolink Compact DAB Transmitter High Power DAB Transmitter Modular FM Transmitter

Apr 18, 2024
Medium 5.3

CVE-2024-21846

Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

Electrolink High Power DAB Transmitter Modular FM Transmitter VHF TV Transmitter

Apr 18, 2024

Revision history

2024-04-16 #1
Initial Publication

References

ICSA Advisory ICSA-24-107-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B