Description
The application is vulnerable to an unauthenticated parameter
manipulation that allows an attacker to set the credentials to blank
giving her access to the admin panel. Also vulnerable to account
takeover and arbitrary password change.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Electrolink | Compact DAB Transmitter | 10W, 100W, 250W | — |
| Electrolink | Medium DAB Transmitter | 500W, 1kW, 2kW | — |
| Electrolink | High Power DAB Transmitter | 2.5kW, 3kW, 4kW, 5kW | — |
| Electrolink | Compact FM Transmitter | Compact FM Transmitter, 500W, 1kW, 2kW | — |
| Electrolink | Modular FM Transmitter | 3kW, 5kW, 10kW, 15kW, 20kW, 30kW | — |
| Electrolink | Digital FM Transmitter | 15W – ≤ 40kW | — |
| Electrolink | VHF TV Transmitter | BI, BIII | — |
| Electrolink | UHF TV Transmitter | 10W – ≤ 5kW | — |
Advisories 1
- ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter CISA ICS & IT advisories · Apr 16, 2024