Back to Database
Status published
Medium
CVE-2024-21846
Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
Vulnerability Description
An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-21846
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Gjoko Krstic publicly reported these vulnerabilities on the internet after an unsuccessful attempt to contact Electrolink directly.
More from Electrolink
View All →CVE-2024-3742
Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information
High
8.7
CVE-2024-3741
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
High
8.7
CVE-2024-22186
Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
High
8.7
CVE-2024-22179
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
High
8.7
CVE-2024-21872
Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
High
8.7
Affected Vendor
Electrolink
View all reports →Affected Software
Compact DAB Transmitter, Medium DAB Transmitter, High Power DAB Transmitter, Compact FM Transmitter, Modular FM Transmitter, Digital FM Transmitter, VHF TV Transmitter, UHF TV Transmitter
Vulnerable Versions:
10W, 100W, 250W, 500W, 1kW, 2kW, 2.5kW, 3kW, 4kW, 5kW, Compact FM Transmitter, 10kW, 15kW, 20kW, 30kW, 15W, BI, BIII
Timeline
Official Publish:
April 18th, 2024
Last Modified:
August 1st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L