Description
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Electrolink | Compact DAB Transmitter | 10W, 100W, 250W | — |
| Electrolink | Medium DAB Transmitter | 500W, 1kW, 2kW | — |
| Electrolink | High Power DAB Transmitter | 2.5kW, 3kW, 4kW, 5kW | — |
| Electrolink | Compact FM Transmitter | Compact FM Transmitter, 500W, 1kW, 2kW | — |
| Electrolink | Modular FM Transmitter | 3kW, 5kW, 10kW, 15kW, 20kW, 30kW | — |
| Electrolink | Digital FM Transmitter | 15W – ≤ 40kW | — |
| Electrolink | VHF TV Transmitter | BI, BIII | — |
| Electrolink | UHF TV Transmitter | 10W – ≤ 5kW | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure http/cves/2024/CVE-2024-3742.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter CISA ICS & IT advisories · Apr 16, 2024