GCVE - cpe:2.3:a:electrolink:medium_dab_transmitter:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:electrolink:medium_dab_transmitter:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Electrolink (`a634d96e-59cb-518c-b22e-a0263ddbb708`)
Product	Medium Dab Transmitter (`fb88cae0-4fdb-54f5-a833-0ac164e47f93`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3742`	vulnerable	2026-06-08 06:43:51.357138	Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information HIGH (7.5) Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system. Published: 2024-04-18T22:15:35.521Z Updated: 2024-08-01T20:20:00.923Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3741`	vulnerable	2026-06-08 06:43:51.347171	Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data HIGH (7.5) Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access. Published: 2024-04-18T22:04:46.300Z Updated: 2024-08-01T20:20:01.174Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22186`	vulnerable	2026-06-08 06:29:34.037917	Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking HIGH (8.8) The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator. Published: 2024-04-18T22:08:17.798Z Updated: 2024-08-08T15:41:44.543Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22179`	vulnerable	2026-06-08 06:29:34.012086	Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data HIGH (7.5) The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change. Published: 2024-04-18T22:06:26.781Z Updated: 2024-08-01T22:35:34.937Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21872`	vulnerable	2026-06-08 06:27:36.926808	Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking HIGH (7.5) The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter. Published: 2024-04-18T22:10:42.293Z Updated: 2024-08-01T22:27:36.412Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21846`	vulnerable	2026-06-08 06:27:36.780559	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1491`	vulnerable	2026-06-08 06:25:40.272734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.