Description
Electrolink transmitters are vulnerable to an authentication bypass
vulnerability affecting the login cookie. An attacker can set an
arbitrary value except 'NO' to the login cookie and have full system
access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Electrolink | Compact DAB Transmitter | 10W, 100W, 250W | — |
| Electrolink | Medium DAB Transmitter | 500W, 1kW, 2kW | — |
| Electrolink | High Power DAB Transmitter | 2.5kW, 3kW, 4kW, 5kW | — |
| Electrolink | Compact FM Transmitter | Compact FM Transmitter, 500W, 1kW, 2kW | — |
| Electrolink | Modular FM Transmitter | 3kW, 5kW, 10kW, 15kW, 20kW, 30kW | — |
| Electrolink | Digital FM Transmitter | 15W – ≤ 40kW | — |
| Electrolink | VHF TV Transmitter | BI, BIII | — |
| Electrolink | UHF TV Transmitter | 10W – ≤ 5kW | — |
Advisories 1
- ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter CISA ICS & IT advisories · Apr 16, 2024