Skip to content
OpenAdvisories
Critical ICSA-24-277-01 2 CVEs

TEM Opera Plus FM Family Transmitter

Published Oct 3, 2024 · Updated Oct 3, 2024

Vendor: TEM Product: Opera Plus FM Family Transmitter

Summary

Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution.

Vulnerabilities 2

  • Critical 9.3
    CVE-2024-41988

    Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

    TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and…

    TEM Opera Plus FM Family Transmitter
  • High 8.6
    CVE-2024-41987

    Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

    The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privil…

    TEM Opera Plus FM Family Transmitter

Revision history

  1. #1

    Initial Publication

References