CVE-2025-28228

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-18 · updated 2026-06-17
Weakness: CWE-522

Description

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext.

Affected products

Electrolink Fm/Dab/Tv Transmitter Web Management System: all versions

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28228
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28228

Get alerted when CVE-2025-28228 or the next vulnerability affects your stack