Description
An unauthenticated attacker can reset the board and stop transmitter
operations by sending a specially-crafted GET request to the command.cgi
gateway, resulting in a denial-of-service scenario.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Electrolink | Compact DAB Transmitter | 10W, 100W, 250W | — |
| Electrolink | Medium DAB Transmitter | 500W, 1kW, 2kW | — |
| Electrolink | High Power DAB Transmitter | 2.5kW, 3kW, 4kW, 5kW | — |
| Electrolink | Compact FM Transmitter | Compact FM Transmitter, 500W, 1kW, 2kW | — |
| Electrolink | Modular FM Transmitter | 3kW, 5kW, 10kW, 15kW, 20kW, 30kW | — |
| Electrolink | Digital FM Transmitter | 15W – ≤ 40kW | — |
| Electrolink | VHF TV Transmitter | BI, BIII | — |
| Electrolink | UHF TV Transmitter | 10W – ≤ 5kW | — |
Advisories 1
- ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter CISA ICS & IT advisories · Apr 16, 2024