What’s Vulnerable › Vulnerabilities

CVE-2024-3742: Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-04-18 · updated 2026-06-17
• Weakness: CWE-312

Description

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.

Affected products

• Electrolink Compact DAB Transmitter: 10W, 100W, 250W
• Electrolink Compact FM Transmitter: 500W, 1kW, 2kW
• Electrolink Digital FM Transmitter: 15W
• Electrolink High Power DAB Transmitter: 5kW, 4kW, 3kW, 2.5kW
• Electrolink Medium DAB Transmitter: 2kW, 1kW, 500W
• Electrolink Modular FM Transmitter: 3kW, 5kW, 10kW, 15kW, 20kW, 30kW
• Electrolink VHF TV Transmitter: BI, BIII, 10W

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

Get alerted when CVE-2024-3742 or the next vulnerability affects your stack