Description
The application suffers from a privilege escalation vulnerability. An
attacker logged in as guest can escalate his privileges by poisoning the
cookie to become administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Electrolink | Compact DAB Transmitter | 10W, 100W, 250W | — |
| Electrolink | Medium DAB Transmitter | 500W, 1kW, 2kW | — |
| Electrolink | High Power DAB Transmitter | 2.5kW, 3kW, 4kW, 5kW | — |
| Electrolink | Compact FM Transmitter | Compact FM Transmitter, 500W, 1kW, 2kW | — |
| Electrolink | Modular FM Transmitter | 3kW, 5kW, 10kW, 15kW, 20kW, 30kW | — |
| Electrolink | Digital FM Transmitter | 15W – ≤ 40kW | — |
| Electrolink | VHF TV Transmitter | BI, BIII | — |
| Electrolink | UHF TV Transmitter | 10W – ≤ 5kW | — |
Advisories 1
- ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter CISA ICS & IT advisories · Apr 16, 2024