// For flags

CVE-2024-21846

Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function

Severity Score

6.9
*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

An unauthenticated attacker can reset the board and stop transmitter
operations by sending a specially-crafted GET request to the command.cgi
gateway, resulting in a denial-of-service scenario.

Un atacante no autenticado puede restablecer la placa y detener las operaciones del transmisor enviando una solicitud GET especialmente manipulada a la puerta de enlace command.cgi, lo que resulta en un escenario de denegaciĆ³n de servicio.

*Credits: Gjoko Krstic publicly reported these vulnerabilities on the internet after an unsuccessful attempt to contact Electrolink directly.
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
None
System
Vulnerable | Subsequent
Confidentiality
None
None
Integrity
None
None
Availability
Low
None
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-01-05 CVE Reserved
  • 2024-04-18 CVE Published
  • 2024-04-19 EPSS Updated
  • 2024-08-01 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-306: Missing Authentication for Critical Function
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Electrolink
Search vendor "Electrolink"
Compact DAB Transmitter
Search vendor "Electrolink" for product "Compact DAB Transmitter"
10
Search vendor "Electrolink" for product "Compact DAB Transmitter" and version "10"
en
Affected
Electrolink
Search vendor "Electrolink"
Compact DAB Transmitter
Search vendor "Electrolink" for product "Compact DAB Transmitter"
100
Search vendor "Electrolink" for product "Compact DAB Transmitter" and version "100"
en
Affected
Electrolink
Search vendor "Electrolink"
Compact DAB Transmitter
Search vendor "Electrolink" for product "Compact DAB Transmitter"
250
Search vendor "Electrolink" for product "Compact DAB Transmitter" and version "250"
en
Affected
Electrolink
Search vendor "Electrolink"
Medium DAB Transmitter
Search vendor "Electrolink" for product "Medium DAB Transmitter"
500
Search vendor "Electrolink" for product "Medium DAB Transmitter" and version "500"
en
Affected
Electrolink
Search vendor "Electrolink"
Medium DAB Transmitter
Search vendor "Electrolink" for product "Medium DAB Transmitter"
1
Search vendor "Electrolink" for product "Medium DAB Transmitter" and version "1"
en
Affected
Electrolink
Search vendor "Electrolink"
Medium DAB Transmitter
Search vendor "Electrolink" for product "Medium DAB Transmitter"
2
Search vendor "Electrolink" for product "Medium DAB Transmitter" and version "2"
en
Affected
Electrolink
Search vendor "Electrolink"
High Power DAB Transmitter
Search vendor "Electrolink" for product "High Power DAB Transmitter"
2.5
Search vendor "Electrolink" for product "High Power DAB Transmitter" and version "2.5"
en
Affected
Electrolink
Search vendor "Electrolink"
High Power DAB Transmitter
Search vendor "Electrolink" for product "High Power DAB Transmitter"
3
Search vendor "Electrolink" for product "High Power DAB Transmitter" and version "3"
en
Affected
Electrolink
Search vendor "Electrolink"
High Power DAB Transmitter
Search vendor "Electrolink" for product "High Power DAB Transmitter"
4
Search vendor "Electrolink" for product "High Power DAB Transmitter" and version "4"
en
Affected
Electrolink
Search vendor "Electrolink"
High Power DAB Transmitter
Search vendor "Electrolink" for product "High Power DAB Transmitter"
5
Search vendor "Electrolink" for product "High Power DAB Transmitter" and version "5"
en
Affected
Electrolink
Search vendor "Electrolink"
Compact FM Transmitter
Search vendor "Electrolink" for product "Compact FM Transmitter"
<=
Search vendor "Electrolink" for product "Compact FM Transmitter" and version " <= "
en
Affected
Electrolink
Search vendor "Electrolink"
Compact FM Transmitter
Search vendor "Electrolink" for product "Compact FM Transmitter"
500
Search vendor "Electrolink" for product "Compact FM Transmitter" and version "500"
en
Affected
Electrolink
Search vendor "Electrolink"
Compact FM Transmitter
Search vendor "Electrolink" for product "Compact FM Transmitter"
1
Search vendor "Electrolink" for product "Compact FM Transmitter" and version "1"
en
Affected
Electrolink
Search vendor "Electrolink"
Compact FM Transmitter
Search vendor "Electrolink" for product "Compact FM Transmitter"
2
Search vendor "Electrolink" for product "Compact FM Transmitter" and version "2"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
3
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "3"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
5
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "5"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
10
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "10"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
15
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "15"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
20
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "20"
en
Affected
Electrolink
Search vendor "Electrolink"
Modular FM Transmitter
Search vendor "Electrolink" for product "Modular FM Transmitter"
30
Search vendor "Electrolink" for product "Modular FM Transmitter" and version "30"
en
Affected
Electrolink
Search vendor "Electrolink"
VHF TV Transmitter
Search vendor "Electrolink" for product "VHF TV Transmitter"
<=
Search vendor "Electrolink" for product "VHF TV Transmitter" and version " <= "
en
Affected
Electrolink
Search vendor "Electrolink"
VHF TV Transmitter
Search vendor "Electrolink" for product "VHF TV Transmitter"
<=
Search vendor "Electrolink" for product "VHF TV Transmitter" and version " <= "
en
Affected