CVE-2024-21872CWE-565

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

High · published April 18, 2024

CVSS v4.0
8.7
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

The device allows an unauthenticated attacker to bypass authentication

and modify the cookie to reveal hidden pages that allows more critical

operations to the transmitter.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00551 · 45.3th percentile
Weakness
CWE-565 · Reliance on Cookies without Validation and Integrity Checking
Published
2024-04-18T22:10Z
EPSS history
Timeline
  • 18 APR 22:10Z
    Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking
    cvelistv5