Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.5%
exploitation probability
0.5%top 60% of all CVEs
observed exploitation
nono source reports it
Electrolink transmitters are vulnerable to an authentication bypass
vulnerability affecting the login cookie. An attacker can set an
arbitrary value except 'NO' to the login cookie and have full system
access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Electrolink · Compact DAB TransmitterElectrolink · Compact FM TransmitterElectrolink · Digital FM TransmitterElectrolink · High Power DAB TransmitterElectrolink · Medium DAB TransmitterElectrolink · Modular FM TransmitterElectrolink · UHF TV TransmitterElectrolink · VHF TV Transmitter