CVE-2024-22179CWE-302

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

High · published April 18, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

The application is vulnerable to an unauthenticated parameter

manipulation that allows an attacker to set the credentials to blank

giving her access to the admin panel. Also vulnerable to account

takeover and arbitrary password change.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2024-04-18T22:06Z
EPSS history
Timeline
  • 18 APR 22:06Z
    Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
    cvelistv5