CVE-2024-21846
Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
| Assigner | icscert |
| Reserved | 2024-01-05 |
| Published | 2024-04-18 |
| Updated | 2024-08-01 |
An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | |
| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Gjoko Krstic publicly reported these vulnerabilities on the internet after an unsuccessful attempt to contact Electrolink directly.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
