Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.4%
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
nono source reports it
The application is vulnerable to an unauthenticated parameter
manipulation that allows an attacker to set the credentials to blank
giving her access to the admin panel. Also vulnerable to account
takeover and arbitrary password change.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
Electrolink · Compact DAB TransmitterElectrolink · Compact FM TransmitterElectrolink · Digital FM TransmitterElectrolink · High Power DAB TransmitterElectrolink · Medium DAB TransmitterElectrolink · Modular FM TransmitterElectrolink · UHF TV TransmitterElectrolink · VHF TV Transmitter