High Power Dab Transmitter
Approved changes feed: RSS · Atom
cpe:2.3:a:electrolink:high_power_dab_transmitter:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Electrolink (a634d96e-59cb-518c-b22e-a0263ddbb708) |
|---|---|
| Product | High Power Dab Transmitter (6d7b3e10-1f60-5948-85f4-399ff255d5b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3742 |
vulnerable | 2026-06-08 06:43:51.357360 |
Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information
HIGH (7.5)
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.
Published: 2024-04-18T22:15:35.521Z
Updated: 2024-08-01T20:20:00.923Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3741 |
vulnerable | 2026-06-08 06:43:51.348348 |
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
HIGH (7.5)
Electrolink transmitters are vulnerable to an authentication bypass
vulnerability affecting the login cookie. An attacker can set an
arbitrary value except 'NO' to the login cookie and have full system
access.
Published: 2024-04-18T22:04:46.300Z
Updated: 2024-08-01T20:20:01.174Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22186 |
vulnerable | 2026-06-08 06:29:34.037947 |
Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
HIGH (8.8)
The application suffers from a privilege escalation vulnerability. An
attacker logged in as guest can escalate his privileges by poisoning the
cookie to become administrator.
Published: 2024-04-18T22:08:17.798Z
Updated: 2024-08-08T15:41:44.543Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22179 |
vulnerable | 2026-06-08 06:29:34.012816 |
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
HIGH (7.5)
The application is vulnerable to an unauthenticated parameter
manipulation that allows an attacker to set the credentials to blank
giving her access to the admin panel. Also vulnerable to account
takeover and arbitrary password change.
Published: 2024-04-18T22:06:26.781Z
Updated: 2024-08-01T22:35:34.937Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21872 |
vulnerable | 2026-06-08 06:27:36.926412 |
Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
HIGH (7.5)
The device allows an unauthenticated attacker to bypass authentication
and modify the cookie to reveal hidden pages that allows more critical
operations to the transmitter.
Published: 2024-04-18T22:10:42.293Z
Updated: 2024-08-01T22:27:36.412Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21846 |
vulnerable | 2026-06-08 06:27:36.781095 |
Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
MEDIUM (5.3)
An unauthenticated attacker can reset the board and stop transmitter
operations by sending a specially-crafted GET request to the command.cgi
gateway, resulting in a denial-of-service scenario.
Published: 2024-04-18T22:12:36.533Z
Updated: 2024-08-01T22:27:36.317Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1491 |
vulnerable | 2026-06-08 06:25:40.273492 |
Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
HIGH (7.5)
The devices allow access to an unprotected endpoint that allows MPFS
file system binary image upload without authentication. The MPFS2 file
system module provides a light-weight read-only file system that can be
stored in external EEPROM, external serial flash, or internal flash
program memory. This file system serves as the basis for the HTTP2 web
server module, but is also used by the SNMP module and is available to
other applications that require basic read-only storage capabilities.
This can be exploited to overwrite the flash program memory that holds
the web server's main interfaces and execute arbitrary code.
Published: 2024-04-18T22:13:54.962Z
Updated: 2024-08-01T18:40:21.285Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.