What’s Vulnerable › Vulnerabilities

CVE-2024-3741: Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-18 · updated 2026-06-17
• Weakness: CWE-302

Description

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

Affected products

• Electrolink Compact DAB Transmitter: 250W
• Electrolink Compact FM Transmitter: 2kW
• Electrolink Digital FM Transmitter: 15W
• Electrolink High Power DAB Transmitter: 5kW
• Electrolink Medium DAB Transmitter: 2kW
• Electrolink Modular FM Transmitter: 30kW
• Electrolink UHF TV Transmitter: 10W
• Electrolink VHF TV Transmitter: BI

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

Get alerted when CVE-2024-3741 or the next vulnerability affects your stack