CVE-2024-9692: Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus

Severity: medium (CVSS 6.9 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-24 · updated 2026-06-17
Weakness: CWE-284

Description

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations.

Affected products

VIMESA Vhf/Fm Transmitter Blue Plus: 9.7.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01

Get alerted when CVE-2024-9692 or the next vulnerability affects your stack