Skip to content
OpenAdvisories
High · 7.5 CVE-2024-21872 EUVD-2024-19483GHSA-9c86-qqfm-5hf3

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

Published Apr 18, 2024 · Updated Aug 1, 2024 · Assigned by icscert

Description

The device allows an unauthenticated attacker to bypass authentication
and modify the cookie to reveal hidden pages that allows more critical
operations to the transmitter.

Affected products

VendorProductAffectedFixed
Electrolink Compact DAB Transmitter 10W, 100W, 250W —
Electrolink Medium DAB Transmitter 500W, 1kW, 2kW —
Electrolink High Power DAB Transmitter 2.5kW, 3kW, 4kW, 5kW —
Electrolink Compact FM Transmitter Compact FM Transmitter, 500W, 1kW, 2kW —
Electrolink Modular FM Transmitter 3kW, 5kW, 10kW, 15kW, 20kW, 30kW —
Electrolink Digital FM Transmitter 15W – ≤ 40kW —
Electrolink VHF TV Transmitter BI, BIII —
Electrolink UHF TV Transmitter 10W – ≤ 5kW —

Advisories 1

References