CVE-2024-39375: critical vulnerability in Markoni-D (Compact) FM Transmitters
Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
TELSAT marKoni FM Transmitters can be bypassed to give attackers full administrator control without proper login credentials. This is critical because anyone can remotely take over the device and modify broadcast settings.
The vulnerability stems from client-side authentication implementation (CWE-603) in TELSAT marKoni FM Transmitters, allowing attackers to bypass authentication mechanisms and escalate privileges to administrator level. An unauthenticated remote attacker can exploit this to gain full administrative control over the transmitter, potentially disrupting FM broadcast operations.
In the same product, most dangerous first.