← back
CVE-2024-21872highCWE-565

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.6%
exploitation probability
0.6%top 57% of all CVEs
observed exploitation
nono source reports it
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N