CVE-2024-3741CWE-302

Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data

High · published April 18, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

Electrolink transmitters are vulnerable to an authentication bypass

vulnerability affecting the login cookie. An attacker can set an

arbitrary value except 'NO' to the login cookie and have full system

access.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00492 · 41.4th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2024-04-18T22:04Z
EPSS history
Timeline
  • 18 APR 22:04Z
    Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
    cvelistv5